GraphQL: Static query validation and max cost limiting

Use cost directive. Cost = 1 unit for each node requested.

Validate query for max size and max complexity and reject bigger ones.

---

Migrated from T4299 (view on Phabricator)