This is a follow up from #40931
Fixes #41146.

This PR adds type checks to the property/field setter when a JsonConverter could potentially have returned an incompatible typed value.
There should be no impact on deserialization performance in the majority of cases where these checks are unnecessary.
The behavior should not depend on the used MemberAccessor implementation. To accomplish this, a JsonException is thrown when a direct assignment would throw an InvalidCastException or null is assigned to a non-nullable value type (in this case calling the setter by reflection, silently assigns default and doesn't throw at all).