Motivation:

DecoderJNI.Wrapper.pull() may return large ByteBuffers (up to ~16 MiB) with no way to limit size. This makes decoding untrusted input unsafe or forces extra buffering in user code.

Modification:

• Add per-call limit: pull(int maxBytes)
• Add persistent limit: Wrapper(..., maxOutputChunkSize)
• Add overloads in Decoder, BrotliInputStream, BrotliDecoderChannel
• Add maxOutputSize to decompress(...) APIs (fail with IOException if exceeded)
• Expose bounded output via JNI (nativePullBounded)

Result:

Callers can bound memory usage (per chunk or total) when decoding, without affecting existing usage.