Enforcing max cluster and max node settings within a tenant.

Trying to create a cluster that violates the max will cause the
request to fail with a 409. Similarly, trying to lower the max
below whats already in use will cause the request to fail with a
409.
Add a comment on why the lock is required.