What was the max landing speed that the Apollo lunar lander was designed for, and what (exactly) would have happened if this was exceeded?