respond: configurable ?max_body_size (default 16 MiB)
The body limit was hard-coded at 1 MiB in two places (the read buffer
and the Content-Length gate), which prevents file uploads of any real
size. Expose it as a single parameter on Respond.run; bump the default
to 16 MiB so multipart/form-data uploads work out of the box without
every caller threading a custom value.