[repository] forbid usage of set_attributes() in before_add_entity
set_attributes() will generate a RQL query that will silently fail.
An explicit error is better.
You can still use the ``entity[attr] = value`` notation that
won't generate a SQL query but still update the inner state
of the entity and its edited_attributes attribute.
[facet] fix 'bookmark this search':
* vid wasn't included in the link generated by the facet box
* proper url quoting in both js / box code (try an has_text search with '&' inside...)