Bug
1872555: Transfer can only realloc when the jemalloc arena is known. r=sfink
`ArrayBufferObject::copyAndDetachRealloc()` calls `ReallocateArrayBufferContents`
to realloc the source buffer into `ArrayBufferContentsArena`. This is only valid
when the source buffer was also created in `ArrayBufferContentsArena`.
To track if the ArrayBuffer contents were allocated in `ArrayBufferContentsArena`,
split `BufferKind::MALLOCED` into `MALLOCED_ARRAYBUFFER_CONTENTS_ARENA` and
`MALLOCED_UNKNOWN_ARENA`.
Differential Revision: https://phabricator.services.mozilla.com/
D197492