Fixes S15.4.4.12_A4_T1 T2 and T3 on Safari where the reversible versions of Array fns were returning non sandboxed versions of arrays.
Fixes #33,#34,#69 Sandboxes array creation after collecting vlues, so that changes to Array.prototype don't affect array creation. Also tidies up calling sandbox values in interpreter.