Verified vector clocks, with Coq!