[turbofan] Lower JSCreate to an inline allocation in JSTypedLowering.

[turbofan] Lower JSCreate to an inline allocation in JSTypedLowering.

This adds initial support for fast inline allocations of JSObject
instances. It currently has exactly the same limitations as Crankshaft.

R=mstarzinger@chromium.org
BUG=v8:4544
LOG=n

Committed: https://crrev.com/c4e19c7d8d8a21485bff922a9d39bbfa23ce25d3
Cr-Commit-Position: refs/heads/master@{#31957}

[Benedikt Meurer, 2015-11-12 12:31:45]

Hey Michi,

Here's the lowering for JSCreate we've talked about.
Please take a look.

Thanks,
Benedikt

[Michael Starzinger, 2015-11-12 12:33:51]

LGTM. I like it. Can we haz unit test?

[Benedikt Meurer, 2015-11-12 12:38:49]

The CQ bit was checked by bmeurer@chromium.org

[Benedikt Meurer, 2015-11-12 12:38:49]

The patchset sent to the CQ was uploaded after l-g-t-m from
mstarzinger@chromium.org
Link to the patchset: https://codereview.chromium.org/1441573004/#ps20001
(title: "Add unit test.")

[commit-bot: I haz the power, 2015-11-12 12:38:55]

CQ is trying da patch. Follow status at
 https://chromium-cq-status.appspot.com/patch-status/1441573004/20001
View timeline at
 https://chromium-cq-status.appspot.com/patch-timeline/1441573004/20001

[commit-bot: I haz the power, 2015-11-12 12:57:21]

Committed patchset #2 (id:20001)

[commit-bot: I haz the power, 2015-11-14 23:20:34]

Patchset 2 (id:??) landed as
https://crrev.com/c4e19c7d8d8a21485bff922a9d39bbfa23ce25d3
Cr-Commit-Position: refs/heads/master@{#31957}