Move speech module over to Oilpan.

This moves the speech/ interfaces over to using Oilpan transition
types. With the exception of the event objects, which will wait until
the base classes have been moved over.

R=haraken@chromium.org, zerny@chromium.org
BUG=340522

Review URL: https://codereview.chromium.org/139803012

git-svn-id: svn://svn.chromium.org/blink/trunk@167088 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Move most of the [Pass]RefPtr's of CSSPrimitiveValue to our transition types.

I still need to move the CSSPrimitiveValues referred from the classes

. Pair
. Counter
. CSSBasicShape and subclasses
. CSSCalcExpressionNode and subclasses
. RectBase and subclasses

Instead of using Persistents I plan on moving the objects to the oilpan heap.
I also added a TraceTrait for RefPtr to compile trace method bodies in non-oilpan mode when tracing collections.
Finally I changed RawPtr's release() to zero out the m_ptr to match RefPtr's version.

R=ager@chromium.org, erik.corry@gmail.com, haraken@chromium.org, jochen@chromium.org, tkent@chromium.org, vegorov@chromium.org, zerny@chromium.org
BUG=341815

Committed: https://src.chromium.org/viewvc/blink?view=rev&revision=167022

Review URL: https://codereview.chromium.org/148523016

git-svn-id: svn://svn.chromium.org/blink/trunk@167089 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Update the order of named properties on HTMLCollection objects

Update the order of named properties on HTMLCollection objects to match a
recent DOM specification fix:
https://github.com/whatwg/dom/commit/8b9338049201d075b1cae365562dfb40fe46d567

If an Element contributes both its id and its name, its id should always
precede its name when enumerating. This is more consistent with the HTML5 spec
and with the behavior of Firefox 27.

R=haraken, arv, tkent
BUG=341269
TEST=fast/dom/htmlcollection-enumerated-properties.html

Review URL: https://codereview.chromium.org/157813013

git-svn-id: svn://svn.chromium.org/blink/trunk@167090 bbb929c8-8fbe-4397-9dbb-9b2b20218538