Improve the ReplicationCoordinatorExternalState to support replacing the local config document (it currently only supports updating it). The split prototype did this with a delete + insert, but that won't work for a production system. Instead, we need to wrap the delete + insert in a transaction so we can guarantee an atomic replacement.