MV clamping

[tterribe]

We do not currently clamp MVs at all (encoder or decoder). This is a security issue, since a malformed MV may cause reads from almost any location. We will need to think about how to add this clamping very carefully, since we will want to both prevent out-of-bounds buffer accesses, but also any potential overflows in the computation of the MVs themselves.