In signalDrainComplete(), _canAcceptNonLocalWrites should be the last thing to do after writing down the "new primary" no-op and enabling balancer, which matches users' expectation.

Since balancer initialization needs to write to admin database, we need to introduce an RAII type AllowWritesBlock and a flag as a decoration of operation context to allow non-local writes even if the node is not primary.