`PointerMetadata::size_for_metadata` can return size which overflows `isize`

[joshlf]

[joshlf]

Turns out this isn't a problem. Everywhere PointerMetadata::size_for_metadata is used, the bounds check is performed afterwards.