Limit HTTP response body downloads

Allow applications to set a maximum response-body size on URLConnection. Reject oversized responses while receiving them, before the entire body is buffered, and report a clear size-limit error. This lets crawlers and other clients bound memory use when a server returns an unexpectedly large response.