feat(transform): Add ProcBodyVerify transformation

[MikaelMayer]

Summary

Adds ProcBodyVerify transformation converting procedures to verification statements. Complements CallElim by providing the callee's view of verification.

Example

Input procedure:

procedure P(x: int) returns (y: int)
spec {
  modifies g;
  requires x > 0;
  ensures y > 0;
  ensures g == old g + 1;
}
{ y := x; g := g + 1; }

Output verification statement:

block "verify_P" {
  init x; init y;
  init old_g; init g := old_g;
  assume "pre_0" (x > 0);
  block "body_P" { y := x; g := g + 1; }
  assert "post_0" (y > 0);
  assert "post_1" (g == old_g + 1);
}

Implementation

• Initializes parameters and modified globals (with old/new state)
• Converts non-free preconditions to assumes
• Wraps body in labeled block
• Converts non-free postconditions to asserts
• Uses getIdentTy! for proper type lookup

Testing

DDM-based tests verify transformation output matches expected structure for:

• Procedures with modifies clauses
• Free specifications
• Multiple modified globals

[MikaelMayer]

All review comments addressed in commit d35a3a2:

1. PROOF_PROGRESS.md — Removed
2. .kiro/settings/lsp.json — Removed
3. requiresToAssumes_length — Removed
4. ensuresToAsserts_length — Removed
5. procBodyVerify_completeness_weak — Removed (no longer relevant with assert-as-skip)
6. procBodyVerify_soundness_weak — Removed (used negated EvalStatement)
7. procBodyVerify_soundness — Removed (used negated EvalStatement)
8. procBodyVerify_completeness — Removed (hypothesis was always false)
9. transform_correct — Renamed to transform_preserves_validity. Added three more: transform_preserves_counterexample, transform_preserves_satisfiability, transform_preserves_unsatisfiability

Also removed all determinism theorems, monad unfolding theorems, and other infrastructure that was no longer needed.

File now has ZERO sorries and ZERO axioms. All proven theorems:

• eval_assert_is_skip, eval_assume_implies_condition, eval_block_iff
• Four semantic judgments: stmt_valid, stmt_falsifiable, stmt_satisfiable, stmt_unsatisfiable
• Four transformation properties: transform_preserves_validity, transform_preserves_counterexample, transform_preserves_satisfiability, transform_preserves_unsatisfiability
• assert_true_correct (proven)
• removeLeadingAssertTrue_preserves_validity (proven)