[runtime] support new Proxy() instead of Proxy.create and install getPrototypeOf trap

test/mjsunit/harmony/reflect-enumerate-opt.js

 // Copyright 2015 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // This is adapted from mjsunit/for-in-opt.js.
 
 // Flags: --harmony-proxies --harmony-reflect --allow-natives-syntax
 
 
 "use strict";
@@ skipping 30 matching lines @@
     if (deopt_has) {
       %DeoptimizeFunction(f2);
       deopt_has = false;
     }
     has_keys.push(k);
     return {value: 10, configurable: true, writable: false, enumerable: true};
   }
 };
 
 
-var proxy = Proxy.create(handler);
+var proxy = new Proxy({}, handler);
 var o = {__proto__: proxy};
 
 function f2(o) {
   var result = [];
   for (var i of Reflect.enumerate(o)) {
     result.push(i);
   }
   return result;
 }
 
 function check_f2() {
   assertEquals(keys, f2(o));
   assertEquals(keys, has_keys);
   has_keys.length = 0;
 }
 
 check_f2();
 check_f2();
 // Test lazy deopt after GetPropertyNamesFast
 %OptimizeFunctionOnNextCall(f2);
 deopt_enum = true;
 check_f2();
 // Test lazy deopt after FILTER_KEY
 %OptimizeFunctionOnNextCall(f2);
 deopt_has = true;
 check_f2();