Use null-prototype objects in server actions manifests (#89069)
As a defense-in-depth mechanism, we're converting the server actions
manifests and client reference manifests to use null-prototype objects,
so that property lookups cannot traverse `Object.prototype`.
