ngclient: Make updater.config immutable

This comes from #2363 / #2359 : we should make the config somehow immutable once it's been used by Updater. This should be a difficult mistake to make:

updater = Updater(...) 
updater.refresh()
updater.config.offline = True

(the issue is refresh() already used config.offline: the value can't be changed during lifetime of Updater. Likely this makes sense for all config)

I originally suggested reading the updater.config.offline value only once during initialization, but that still makes writing the above code possible. Would be better if it failed linting.

I suppose two possible actions:

• Updater.config becomes a read only property (or not public at all)
• Could make UpdaterConfig frozen=True as well

Inizia tracciando Updater.config e UpdaterConfig attraverso refresh(), usando l’esempio dell’issue per identificare quando viene letta la configurazione. Confronta la property di sola lettura e le opzioni di configurazione congelata, quindi verifica che la configurazione non possa essere modificata dopo che Updater l’ha usata e che il comportamento esistente rimanga coperto.