Function fit_within 

pub fn fit_within(src: (u32, u32), bounds: (u32, u32)) -> (u32, u32)

Scale src down to fit inside bounds, preserving aspect ratio. Returns src unchanged when it already fits — the never-upscale rule.