Stop all writes when memory limit or WAL file limit reached

[pauldix]

To ensure server stability, we should reject all writes if we have hit an upper limit on either a configured memory boundary (optional) or a number of WAL files in the backlog (default to 5 * snapshot size).

This can be a periodic check in the background (once a minute is probably fine) that sets a flag in the WriteBuffer to reject writes.