ui: avoid sending framebuffer updates outside client desktop bounds