add `max` to the gui spec

[thedavidmeister]

should work the same as min but as a max value

[hardyjosh]

looks like we'll use json schema instead for validation