Rewrite Saturating in terms of CheckedAdd/CheckedSub

r? @thestinger