Spectre bounds check mitigation using a subtraction with borrow

Subtraction with borrow appears a useful pattern for Spectre bound check mitigation and can be fused with the bounds check branch for use in web sandbox implementations.