pf: add 'max-pkt-size'

Allow pf to limit packets to a specified maximum size. This applies to all
packets, and if reassembly is enabled, looks at the reassembled size, not the
size of individual fragments.

Sponsored by: Rubicon Communications, LLC ("Netgate")