clamp TerrainHeightEllipsoid result to be >= 0.0

This is just because rounding errors can push it very slightly negative
and trigger the negative-height assertion.