server: deny join if cluster is full

If there's no uncommitted entry in the cluster, the time for it to commit is:
1. follower proxy proposal to leader
2. leader broadcasts append entry to all followers
3. leader broadcasts heartbeat

If the cluster has something uncommitted, it becomes a little more complicated. So I leave 6 times of heartbeat here to see whether it happens.