Dumpling: Prevent extreme PG split multipliers

This sanity check exists in newer code, but a large deployer requested that we backport it to Dumpling. The monitor approximates the number of PGs that will be created on each OSD, and caps it at a configurable number (32 by default). This helps prevent starvation of client requests, repair work, etc when the OSDMaps specifying the split are being processed.