[shared-struct] Fix concurrent marking for Atomics.{Mutex,Condition}

The concurrent marker needs an override for JSObject subclasses with
their own visitor id and body descriptor. Implement the missing
VisitJSSynchronizationPrimitive.

Bug: v8:13214
Change-Id: Ie4f64e2b4e9b211f9661da75bf8d2d012f8d16ac
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3846320Reviewed-by: Dominik Inführ <dinfuehr@chromium.org>
Auto-Submit: Shu-yu Guo <syg@chromium.org>
Commit-Queue: Shu-yu Guo <syg@chromium.org>
Cr-Commit-Position: refs/heads/main@{#82634}

src/heap/concurrent-marking.cc

@@ -427,6 +427,12 @@ class ConcurrentMarkingVisitor final
                                                                   object);
   }
 
+  int VisitJSSynchronizationPrimitive(Map map,
+                                      JSSynchronizationPrimitive object) {
+    return ConcurrentMarkingVisitorUtility::VisitJSObjectSubclass(this, map,
+                                                                  object);
+  }
+
   int VisitConsString(Map map, ConsString object) {
     return ConcurrentMarkingVisitorUtility::VisitFullyWithSnapshot(this, map,
                                                                    object);