avro: integer bounds aren't checked when decoding

[rogpeppe]

Currently if reading an integer type into a Go type that's smaller, we can get a silent overflow. We should check that and error if it happens. See relevant TODO in decode.go.