lib: support returning Safe collections from C++

[ExE-Boss]

Refs: #36652

This works similarly to what’s done to support constructing Buffer instances from C++, but unlike Buffer.prototype, the Safe* collection prototypes can be captured as soon as InitializePrimordials has finished running lib/internal/per_context/primordials.js.

[aduh95]

I think it'd interesting to add a check that we're no longer using user-mutable methods:

const assert = require('assert');
const { options } = require('internal/options');

assert.notStrictEqual(options.get, Map.prototype.get);

const assert = require('assert');
const { getOptionValue } = require('internal/options');

Map.prototype.get = function get() { return 'polluted result'; };
assert.strictEqual(getOptionValue('--expose-internals'), true);

[ExE-Boss]

const assert = require('assert');
const { options } = require('internal/options');

assert.notStrictEqual(options.get, Map.prototype.get);

That will fail unless Map.prototype.get gets mutated, because the Safe* collections are initialised by having their descriptors copied from the unsafe collections, and thus SafeMap.prototype.get === Map.prototype.get is guaranteed until user code runs.

[nodejs-github-bot]

CI: https://ci.nodejs.org/job/node-test-pull-request/35644/

[nodejs-github-bot]

CI: https://ci.nodejs.org/job/node-test-pull-request/35664/

[jasnell]

Landed in 3ec7114