Implement -d, --max-depth for samtools depth

Note that the limit was only approximate, presumably due to reads
falling at pileup boundaries. This adds a small margin and then
hard caps the depth on output to give a clean hard limit when
working at the given coverage depth limit.