nsqd: better enforcement of body/msg limits in HTTP publish

this is another vector for abuse.  use limit readers to enforce. cc @jehiah