LibJS: Change Array by copy proposal implementation status

[linusg]

PRs:

• LibJS: Implement the "Change Array by copy" stage 3 proposal #14270
• LibJS: Add %TypedArray%.prototype.toSorted #14400
• LibJS: Add %TypedArray%.prototype.toReversed  #14445
• LibJS: Avoid potential overflow in Array.prototype.toSpliced() #14466
• LibJS: Add %TypedArray%.prototype.with  #14644
• LibJS: Use SortIndexedProperties AO in [Typed]Array.prototype.sort #14692
• LibJS: Update change-array-by-copy implementation with spec changes #14707
• LibJS: Allow TypedArrays to become detached while sorting #16182
• LibJS: Protect CanonicalIndex against double-to-integer overflow #16354

TODO:

• Fix https://github.com/tc39/test262/blob/main/test/built-ins/TypedArray/prototype/with/index-bigger-or-eq-than-length.js
• Fix https://github.com/tc39/test262/blob/main/test/built-ins/TypedArray/prototype/with/index-smaller-than-minus-length.js
• Update spec links after stage 4 (LibJS: Update spec numbers / text for the Change Array by Copy proposal #17943)

Test262:

• https://libjs.dev/test262/per-file/?path=test/built-ins/Array/prototype/toReversed
• https://libjs.dev/test262/per-file/?path=test/built-ins/Array/prototype/toSorted
• https://libjs.dev/test262/per-file/?path=test/built-ins/Array/prototype/toSpliced
• https://libjs.dev/test262/per-file/?path=test/built-ins/Array/prototype/with
• https://libjs.dev/test262/per-file/?path=test/built-ins/TypedArray/prototype/toReversed
• https://libjs.dev/test262/per-file/?path=test/built-ins/TypedArray/prototype/toSorted
• https://libjs.dev/test262/per-file/?path=test/built-ins/TypedArray/prototype/with

[trflynn89]

We also fail https://github.com/tc39/test262/blob/main/test/built-ins/TypedArray/prototype/with/index-smaller-than-minus-length.js, which I added to the description. The issue is we're happily overflowing from a large double (2^53) to a u32 when we create CanonicalIndex and carrying on.