Implement bwauth cap for TCP socket exhaustion

Step 0 is to determine if any of the Gbit+ tor relays (especially Guard+Exit nodes) ever come close to running out of TCP sockets.

Step 1 is find some way to measure stream failures from the bwauths, compute a stream_error value, and use it. See #4708 (moved) for more details on that.