Switch to using CamlCheck

- Remove the builtin randomised testing stuff

- Reformulate the property tests in terms of CamlCheck properties.

- Fix discovered bug in the implementation of hardbreak, discovered by
  more rigorous randomised testing