Keep AnimationController's _value in bounds

Rather than clamping _value on read, we now clamp the value when writing it,
which simplifies reasoning about _value.