Integer overflow in ncallout via unbounded kern.maxfiles

Summary

maxfiles fetched with lower clamp only(>=128)(:283). ncallout=16+maxproc+maxfiles(all int)(:327) can overflow near INT_MAX -> small/negative bypassing 5*60*hz cap(:328). Loader-only, subject to kern.ncallout override.