[IR] Fix bug in implementation of PUSH_FRAME instruction

* Fixes a ton of rubyspec errors when AddCallProtocolInstructions
  pass is enabled. One more rubyspec failure to be investigated
  with this pass enabled before this can be considered green
  as well.