consensus: Limit size of any inbound message queue

[goshawk-3]

Describe the bug After implementing issue #1465 , any unbounded queue that buffers inbound messages must be either limited or replaced by a ring buffer to mitigate any OOM attack.