le_audio: Guard ASE control point commands from invalid metadata

Patch adds checks for metadata length and ASE count for control point
command.

Test: atest bluetooth_le_audio_test
Sponsor: @jpawlowski
Bug: 233069336
Change-Id: I26479550a90e3366299280cca30a5d27284bbef9