[runtime] support new Proxy() instead of Proxy.create and install getPrototypeOf trap

test/mjsunit/es6/regress/regress-cr493566.js

 // Copyright 2015 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // Flags: --harmony-proxies
 
 "use strict";
 
 
 var global = this;
@@ skipping 12 matching lines @@
 
 (function TestProxyProto() {
   var calls = 0;
   var handler = {
     getPropertyDescriptor: function(name) {
       calls++;
       return undefined;
     }
   };
 
-  var proto = {};
-  var proxy = Proxy.create(handler, proto);
+  var target = {};
+  var proxy = new Proxy(target, handler);
   var object = {
     __proto__: proxy,
     setX(v) {
       super.x = v;
     },
     setSymbol(sym, v) {
       super[sym] = v;
     }
   };
 
@@ skipping 22 matching lines @@
       assertUnreachable();
     },
     set(receiver, name, value) {
       calls++;
       assertEquals(proxy, receiver);
       assertEquals('y', name);
       assertEquals(3, value);
     }
   };
 
-  var proxy = Proxy.create(handler);
+  var proxy = new Proxy({}, handler);
   object.setY.call(proxy, 3);
   assertEquals(1, calls);
 })();