Scope proxy leak allow constructive access to global lexicals

[mhofman]

A property of the globalLexicals option of the Compartment constructor is that they can only be accessed lexically, which can be denied to evaluated code by simple code transforms. However combined with the leak of scope proxy objects (#31), evaluate code can constructively reach the global lexicals.

const c = new Compartment({}, { globalLexicals: { foo() { return 'secret'; } });
c.evaluate(`
  globalThis.getThis = function() { return this; };
  const hiddenFoo = getThis()[['f', 'o', 'o'].join('')];
  hiddenFoo()
`);

Unlike #876 this affects all evaluators.

[mhofman]

Now that #1293 has landed, the global lexical leak can only happen through the lexicals created for module bindings which currently use the same object. #1341 should fix that.