Persist largest known protocol version

Because downgrades are only supported for one minor version, we would like to prevent downgrading too far, because this would cause undefined behaviour. A cluster should persist the largest used protocol version and expose this through `status json`. If a process attempts to start with a version that we cannot downgrade to, it should be prevented from making progress.