Create a setProperties config action and disallow SimpleConfigUpdate on config entities

Problem/Motivation

\Drupal\Core\Config\Action\Plugin\ConfigAction\SimpleConfigUpdate::apply() can change config entities. Is this too useful or should we restrict it.

Proposed resolution

@tbd

Remaining tasks

User interface changes

API changes

Data model changes