More bounds on views

Add bounds checks for `Cstruct.BE/LE` functions that violate a view.  Previously, only bounds errors on the underlying buffers would raise.

Bug #25, reported by @yomimono in mirage/mirage-tcpip#56.