Handle `$pull` update validators separately from `$set`

[vkarpov15]

There's a lot of quirks like $in (#4440) and array vs single object (#6889) that make update validators pretty brittle with $pull. We should separate this out.