After bug 1499644 all Baseline ICs should work fine without a BaselineScript, except for the type monitoring code because that requires the map stored in BaselineScript. We should just move that map from BaselineScript to TypeScript. We could even combine it with the bytecode iteration in ICScript::Create (TypeScript always has an ICScript after bug 1499644) so we don't need a second pass for this. (Maybe we can move JSScript::nTypeSets_ from JSScript to TypeScript at the same time and remove the code for computing that in the frontend.)

Pushed by jdemooij@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/f745bbf9f347 part 1 - Move bytecode map from BaselineScript to TypeScript. r=tcampbell https://hg.mozilla.org/integration/autoland/rev/ec1aa436aeff part 2 - Rename JSScript::nTypeSets to JSScript::numBytecodeTypeSets. r=tcampbell https://hg.mozilla.org/integration/autoland/rev/ddf227b9fa75 part 3 - Move the bytecodeTypeMap hint to TypeScript. r=tcampbell https://hg.mozilla.org/integration/autoland/rev/686e61adb628 part 4 - Simplify the bytecodeTypeMap binary search code. r=tcampbell