Document max protocols size

[dlongley]

The protocols max size depends on the browser but we should cap it in our documentation here and in the credential handler polyfill to be based on the most restrictive browser. The protocols size must fit within some max size for a JSON object that also includes credentialRequestOrigin and perhaps some space for reserved future additional properties (such as #135).