Robust command governors for constrained linear systems