limit remote SLD downloads to 1 Megabyte by default (#4703)

can be overriden by the (wms|ows)_remote_sld_max_bytes metadata entry