fix(web): render textarea spread values as content

[javascript-unsafe]

Summary

• Render textarea value and defaultValue props from SSR spreads as text content.
• Keep the SSR runtime path aligned with compiler-specialized textarea output.
• Cover declared and spread-supplied values in both attribute orderings.

Test plan

• pnpm --dir packages/web exec vitest run --config vite.config.server.mjs
• pnpm --dir packages/web exec vitest run --config vite.config.hydrate.mjs
• pnpm --dir packages/web exec vitest run
• JSX_COMPILER=babel pnpm --dir packages/web exec vitest run --config vite.config.server.mjs test/server/spread-function-source.spec.tsx

[changeset-bot]

🦋 Changeset detected

Latest commit: 4f159e3

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 11 packages

Name	Type
@solidjs/web	Patch
@solidjs/babel-plugin	Patch
@solidjs/element	Patch
@solidjs/h	Patch
@solidjs/html	Patch
test-integration	Patch
@solidjs/compiler	Patch
@solidjs/diagnostics	Patch
@solidjs/signals	Patch
solid-js	Patch
@solidjs/universal	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[codspeed-hq]

Merging this PR will not alter performance

✅ 136 untouched benchmarks

---

_{Comparing javascript-unsafe:fix/ssr-textarea-spread-value-3286 (4f159e3) with next (b1b38c3)}