Implement "gradual drive"

[brettle]

Limit the change in the speed passed to arcade drive to limit max acceleration so we don't tip. This would be used as a fallback if drivetrain characterization fails or encoders fail.