apply recursion limit api to all tokens

[lrlna]

To help with securing parser usage in server and/or router environments we should allow limiting the number of tokens that can parsed by the parser. This can expand on the existing recursion limit API we already have, but apply to not only selection sets, but all nodes.

Prior art

GraphQL Java has an implementation limiting number of parsed tokens to help prevent DOS attacks in java graphql servers. And so does graphql-js

[lrlna]

done in #347