meta-wayland-surface: Clip damage to buffer dimensions

A client can send us damage that exceeds the buffer size, protect against that
by clipping the damage to the buffer's region.