Reland shipping of --harmony-destructuring-bind (issue 811).

Fix promotion of JSFunctions with in-object properties (issue 4572, Chromium issue 561481).

Allow in-object properties in JSCollections, JSWeakCollections and JSRegExp (issue 4531).

Fix JSFunction's in-object properties initialization (issue 4572).

Performance and stability improvements on all platforms.

Cr-Commit-Position: refs/heads/4.9.68@{#1}
Cr-Branched-From: 802ea71e7c1627a934febeee8868ff4344d2dfd1-refs/heads/master@{#32307}