[runtime] support new Proxy() instead of Proxy.create and install getPrototypeOf trap

test/mjsunit/for-in-opt.js

 // Copyright 2015 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // Flags: --harmony-proxies --allow-natives-syntax --expose-debug-as debug
 
 "use strict";
 
 // Test non-JSObject receiver.
 function f(o) {
@@ skipping 28 matching lines @@
     if (deopt_has) {
       %DeoptimizeFunction(f2);
       deopt_has = false;
     }
     has_keys.push(k);
     return {value: 10, configurable: true, writable: false, enumerable: true};
   }
 };
 
 
-var proxy = Proxy.create(handler);
+var proxy = new Proxy({}, handler);
 var o = {__proto__: proxy};
 
 function f2(o) {
   var result = [];
   for (var i in o) {
     result.push(i);
   }
   return result;
 }
 
@@ skipping 25 matching lines @@
 f3(undefined);
 f3(null);
 
 // Reliable repro for an issue previously flushed out by GC stress.
 var handler2 = {
   getPropertyDescriptor: function(k) {
     has_keys.push(k);
     return {value: 10, configurable: true, writable: false, enumerable: true};
   }
 }
-var proxy2 = Proxy.create(handler2);
+var proxy2 = new Proxy({}, handler2);
 var o2 = {__proto__: proxy2};
 var p = {x: "x"}
 
 function f4(o, p) {
   var result = [];
   for (var i in o) {
     var j = p.x + "str";
     result.push(i);
   }
   return result;
@@ skipping 26 matching lines @@
     return ["a", "b"];
   },
 
   getPropertyDescriptor: function(k) {
     if (k == "a") count++;
     if (x) %ScheduleBreak();
     return {value: 10, configurable: true, writable: false, enumerable: true};
   }
 };
 
-var proxy3 = Proxy.create(handler3);
+var proxy3 = new Proxy({}, handler3);
 var o3 = {__proto__: proxy3};
 
 function f5() {
   for (var p in o3) {
     print(p);
   }
 }
 
 x = false;
 
 f5(); f5(); f5();
 %OptimizeFunctionOnNextCall(f5);
 x = true;
 count = 0;
 Debug.setListener(listener);
 f5();
 Debug.setListener(null);
 assertEquals(1, count);