Specify maximum message sizes (and other limits) in inter-canister calls

[Dfinity-Bjoern]

Functions that append data to messages in calls and replies can actually trap if the data exceeds the permitted limits. (Check in the code which function traps!) That should be represented in the spec.