Use js_free in ThreadSharedFloatArrayBufferList.

This may be wrong, as the underlying buffer seems to be entirely internal
and not exposed to content (in fact, it is immutable). Perhaps the proper
solution to this would be to copy the buffer in

StealJSArrayDataIntoThreadSharedFloatArrayBufferList

in AudioBuffer.cpp