Add size limits for Azure attestation evidence before deserialization

[samlaf]

Currently a malicious peer could could send an oversized Azure attestation payload with very large PEM/base64 fields, causing us to allocate/deserialize/parse more data than needed.

See #49 (comment) for more context.