LibJS: Consistently make prototype the last argument in Object ctors

This is so that we can reliably allocate them in a template function,
e.g. in ordinary_create_from_constructor():

    global_object.heap().allocate<T>(
        global_object, forward<Args>(args)..., *prototype);

The majority of objects already take the prototype as the last argument,
so I updated the ones that didn't.

Userland/Libraries/LibJS/Runtime/WeakRef.h

@@ -20,7 +20,7 @@ class WeakRef final
 public:
     static WeakRef* create(GlobalObject&, Object*);
 
-    explicit WeakRef(Object& prototype, Object*);
+    explicit WeakRef(Object*, Object& prototype);
     virtual ~WeakRef() override;
 
     Object* value() const { return m_value; };