One of the implicit contract of using prepared transaction in WiredTiger is that we cannot move stable timestamp ahead of the "all_durable" timestamp. Otherwise, the prepared transaction that is being committed may become stable as its durable timestamp is now behind the stable timestamp, which will cause the prepared transaction being partially visible to checkpoint.

Add an assert to make sure we don't move the stable timestamp ahead of the all_durable timestamp.