levelbar: clamp value to bounds in set_value()

set_value() is a public API, so we should enforce that the given value is within bounds. Currently, nor set_value() nor any function called transitively enforces that.

Fixes #4772