AP_Motors: properly constrain thr_adj_max

This fixes a crashomatic bug. Per Leonard, thr_adj_max should never be allowed to be negative.
Please also backport to 3.1.2 and release as 3.1.3.