LibJS: Consistently make prototype the last argument in Object ctors

This is so that we can reliably allocate them in a template function,
e.g. in ordinary_create_from_constructor():

    global_object.heap().allocate<T>(
        global_object, forward<Args>(args)..., *prototype);

The majority of objects already take the prototype as the last argument,
so I updated the ones that didn't.

Userland/Libraries/LibJS/Runtime/Function.h

@@ -46,7 +46,7 @@ protected:
     virtual void visit_edges(Visitor&) override;
 
     explicit Function(Object& prototype);
-    Function(Object& prototype, Value bound_this, Vector<Value> bound_arguments);
+    Function(Value bound_this, Vector<Value> bound_arguments, Object& prototype);
 
 private:
     virtual bool is_function() const override { return true; }