Markup: reinstate some <var> tags

In Editorial commit f1b22ef (tc39#1376):

- "%<var>NativeError</var>Prototype%" changed to "%NativeErrorPrototype%",
  which doesn't make sense, because there's no such intrinsic.

- "%<var>TypedArray</var>Prototype%" changed to "%TypedArrayPrototype%",
  which would be a change in semantics, which shouldn't happen in an Editorial commit.

So these changes were presumably mistakes.

spec.html

@@ -25602,7 +25602,7 @@ <h1>NativeError ( _message_ )</h1>
           <p>When a _NativeError_ function is called with argument _message_, the following steps are taken:</p>
           <emu-alg>
             1. If NewTarget is *undefined*, let _newTarget_ be the active function object; else let _newTarget_ be NewTarget.
-            1. Let _O_ be ? OrdinaryCreateFromConstructor(_newTarget_, <code>"%NativeErrorPrototype%"</code>, &laquo; [[ErrorData]] &raquo;).
+            1. Let _O_ be ? OrdinaryCreateFromConstructor(_newTarget_, <code>"%<var>NativeError</var>Prototype%"</code>, &laquo; [[ErrorData]] &raquo;).
             1. If _message_ is not *undefined*, then
               1. Let _msg_ be ? ToString(_message_).
               1. Let _msgDesc_ be the PropertyDescriptor { [[Value]]: _msg_, [[Writable]]: *true*, [[Enumerable]]: *false*, [[Configurable]]: *true* }.
@@ -33990,7 +33990,7 @@ <h1>_TypedArray_ ( )</h1>
         <emu-alg>
           1. If NewTarget is *undefined*, throw a *TypeError* exception.
           1. Let _constructorName_ be the String value of the Constructor Name value specified in <emu-xref href="#table-49"></emu-xref> for this <var>TypedArray</var> constructor.
-          1. Return ? AllocateTypedArray(_constructorName_, NewTarget, <code>"%TypedArrayPrototype%"</code>, 0).
+          1. Return ? AllocateTypedArray(_constructorName_, NewTarget, <code>"%<var>TypedArray</var>Prototype%"</code>, 0).
         </emu-alg>
       </emu-clause>
 
@@ -34003,7 +34003,7 @@ <h1>_TypedArray_ ( _length_ )</h1>
           1. If NewTarget is *undefined*, throw a *TypeError* exception.
           1. Let _elementLength_ be ? ToIndex(_length_).
           1. Let _constructorName_ be the String value of the Constructor Name value specified in <emu-xref href="#table-49"></emu-xref> for this <var>TypedArray</var> constructor.
-          1. Return ? AllocateTypedArray(_constructorName_, NewTarget, <code>"%TypedArrayPrototype%"</code>, _elementLength_).
+          1. Return ? AllocateTypedArray(_constructorName_, NewTarget, <code>"%<var>TypedArray</var>Prototype%"</code>, _elementLength_).
         </emu-alg>
 
         <emu-clause id="sec-allocatetypedarray" aoid="AllocateTypedArray">
@@ -34052,7 +34052,7 @@ <h1>_TypedArray_ ( _typedArray_ )</h1>
           1. Assert: Type(_typedArray_) is Object and _typedArray_ has a [[TypedArrayName]] internal slot.
           1. If NewTarget is *undefined*, throw a *TypeError* exception.
           1. Let _constructorName_ be the String value of the Constructor Name value specified in <emu-xref href="#table-49"></emu-xref> for this <var>TypedArray</var> constructor.
-          1. Let _O_ be ? AllocateTypedArray(_constructorName_, NewTarget, <code>"%TypedArrayPrototype%"</code>).
+          1. Let _O_ be ? AllocateTypedArray(_constructorName_, NewTarget, <code>"%<var>TypedArray</var>Prototype%"</code>).
           1. Let _srcArray_ be _typedArray_.
           1. Let _srcData_ be _srcArray_.[[ViewedArrayBuffer]].
           1. If IsDetachedBuffer(_srcData_) is *true*, throw a *TypeError* exception.
@@ -34098,7 +34098,7 @@ <h1>_TypedArray_ ( _object_ )</h1>
           1. Assert: Type(_object_) is Object and _object_ does not have either a [[TypedArrayName]] or an [[ArrayBufferData]] internal slot.
           1. If NewTarget is *undefined*, throw a *TypeError* exception.
           1. Let _constructorName_ be the String value of the Constructor Name value specified in <emu-xref href="#table-49"></emu-xref> for this <var>TypedArray</var> constructor.
-          1. Let _O_ be ? AllocateTypedArray(_constructorName_, NewTarget, <code>"%TypedArrayPrototype%"</code>).
+          1. Let _O_ be ? AllocateTypedArray(_constructorName_, NewTarget, <code>"%<var>TypedArray</var>Prototype%"</code>).
           1. Let _usingIterator_ be ? GetMethod(_object_, @@iterator).
           1. If _usingIterator_ is not *undefined*, then
             1. Let _values_ be ? IterableToList(_object_, _usingIterator_).
@@ -34134,7 +34134,7 @@ <h1>_TypedArray_ ( _buffer_ [ , _byteOffset_ [ , _length_ ] ] )</h1>
           1. Assert: Type(_buffer_) is Object and _buffer_ has an [[ArrayBufferData]] internal slot.
           1. If NewTarget is *undefined*, throw a *TypeError* exception.
           1. Let _constructorName_ be the String value of the Constructor Name value specified in <emu-xref href="#table-49"></emu-xref> for this <var>TypedArray</var> constructor.
-          1. Let _O_ be ? AllocateTypedArray(_constructorName_, NewTarget, <code>"%TypedArrayPrototype%"</code>).
+          1. Let _O_ be ? AllocateTypedArray(_constructorName_, NewTarget, <code>"%<var>TypedArray</var>Prototype%"</code>).
           1. Let _elementSize_ be the Element Size value in <emu-xref href="#table-49"></emu-xref> for _constructorName_.
           1. Let _offset_ be ? ToIndex(_byteOffset_).
           1. If _offset_ modulo _elementSize_ &ne; 0, throw a *RangeError* exception.