LibJS: Convert two suspicious Vector<Value> to MarkedValueList

Libraries/LibJS/Runtime/ArrayConstructor.cpp

@@ -98,7 +98,7 @@ JS_DEFINE_NATIVE_FUNCTION(ArrayConstructor::from)
     // Array.from() lets you create Arrays from:
     if (auto size = object->indexed_properties().array_like_size()) {
         // * array-like objects (objects with a length property and indexed elements)
-        Vector<Value> elements;
+        MarkedValueList elements(interpreter.heap());
         elements.ensure_capacity(size);
         for (size_t i = 0; i < size; ++i) {
             elements.append(object->get(i));

Libraries/LibJS/Runtime/ArrayPrototype.cpp

@@ -558,7 +558,7 @@ JS_DEFINE_NATIVE_FUNCTION(ArrayPrototype::reverse)
     if (array->indexed_properties().is_empty())
         return array;
 
-    Vector<Value> array_reverse;
+    MarkedValueList array_reverse(interpreter.heap());
     auto size = array->indexed_properties().array_like_size();
     array_reverse.ensure_capacity(size);