Fix sBIT handling in pngread

Signed-off-by: John Bowler <jbowler@acm.org>
png_read_png changes; remove limits and use of accessor functions
Fix the 16-bit case, where the function would crash if the input PNG was exactly
65536 rows high.

Signed-off-by: John Bowler <jbowler@acm.org>