Sum the canonical byte size of a materialized stream and deny with
Overloaded { StreamBytes } if it exceeds max_total_bytes (0 = unlimited).
Uses the same per-chunk measurement as truncate_stream_to_limits, so the
at-arrival count and the finalize-time count agree by construction.
Fallible per-chunk push for KernelError-returning accumulators. Denies before
materializing past max_total_bytes (StreamBytes) OR past max_chunks
retained chunks (StreamChunks), and maps a failed allocation under strict
overcommit to a typed deny (Allocation) rather than an abort.