Handle if writes come in too fast to anchor

[stbrody]

Set a maximum size for an anchor batch.

Options:

1. anchor early, faster than our configured anchor interval
2. Fail incoming writes until anchoring runs

Preliminary decision from earlier discussions: go with option 2. This requires building a backstop to the C1 API that the anchoring system can activate