[mono] fix bound checks for Spans in LLVM-jit mode (add extra SROA pass) (#20054)