Add more tests for receiver check in IntegerIndexedElementSet

[anba]

Additional tests to cover some spec-compliance issues I've encountered while implementing tc39/ecma262#1556 in SpiderMonkey.

[Ms2ger]

Did you mean to push all three commits to this PR? I'm happy to approve the first one, at least, but would need to spend some more time reviewing the others.

[anba]

Yes, that was intentional, because at least for SpiderMonkey there are shared code paths for normal property operations and environment operations, so when I've updated the property operations for out-of-bounds typed array indices, I also had to worry about environment operations. Similar story about the new test for TypedArray.prototype.set: I've also updated the TypedArraySetElement implementation in SM, which led to checking which spec operations actually call TypedArraySetElement and writing some small tests to check implementations agree on the spec semantics. This uncovered a spec violation in JSC (72933df).