[JSC] Update TypedArray#sort to the latest resizable array buffer spec

https://bugs.webkit.org/show_bug.cgi?id=263311
rdar://117121720

Reviewed by Alexey Shvayka.

This patch updates TypedArray#sort to align to the latest spec.
We should not get the length again. This is observable in resizable array buffer.
This patch also enables resizable array buffer test262 tests inside staging directory.

* JSTests/test262/config.yaml:
* Source/JavaScriptCore/builtins/TypedArrayPrototype.js:
(linkTimeConstant.typedArrayMergeSort):

Canonical link: https://commits.webkit.org/269458@main

Author: Constellation

JSTests/test262/config.yaml

@@ -55,7 +55,9 @@ skip:
     - test/intl402/Temporal/PlainYearMonth
     - test/intl402/Temporal/TimeZone
     - test/intl402/Temporal/ZonedDateTime
-    - test/staging
+    - test/staging/Intl402
+    - test/staging/JSON
+    - test/staging/Temporal
   files:
     # https://github.com/claudepache/es-legacy-function-reflection
     - test/built-ins/ThrowTypeError/unique-per-realm-function-proto.js

Source/JavaScriptCore/builtins/TypedArrayPrototype.js

@@ -213,7 +213,6 @@ function typedArrayMergeSort(array, valueCount, comparator)
     }
 
     if (src != array) {
-        valueCount = @min(@typedArrayLength(array), valueCount);
         for (var i = 0; i < valueCount; ++i)
             array[i] = src[i];
     }