[coretext] Clamp variation settings to min/max Like our native implementation does; CoreText doesn't itself. Also fix leak of CFNumber's.