Make typed arrays safe

[jdm]

#15672 was work towards this. I don't remember the exact motivation at the moment.

[Xanewok]

#20267 and servo/rust-mozjs#397 introduce support for typed arrays using Box<Heap<*mut JSObject>> variant (in addition to stack-rooting using CustomAutoRooter).

[jdm]

Good enough!