[runtime] support new Proxy() instead of Proxy.create and install getPrototypeOf trap

test/mjsunit/regress/regress-crbug-506956.js

 // Copyright 2015 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // Flags: --harmony-proxies
 
 try {
-  var p = Proxy.create({ getPropertyDescriptor: function() { throw "boom"; } });
+  var p = new Proxy({}, {
+      getPropertyDescriptor: function() { throw "boom"; }
+  });
   var o = Object.create(p);
   with (o) { delete unresolved_name; }
 } catch(e) {
 }