engine: cap joystick .numAxes and .numButtons to the highest index actually valid for the current controller

Since there's no function to just return the number of valid axes and buttons, I suspect SDL expects us to keep track of which indexes are valid ourselves as the range of valid values may not be contiguous. We aren't doing that yet.