VM Wrapper must always push lr.

Fixes divergent behavior between VM tail calls and VM direct calls.
The latter cannot push lr without using a shim, which is avoidable.

Fixes a simplified version of basic/arrayConcat.js.