Remove some of the more easily avoided %assert_totals
Use toNat to avoid %assert_total when negative Int is treated the same as 0.
Replace some Heap proofs with impossible.
Merge pull request #664 from sjdrodge/assert_total_cleanup

Some %assert_total cleanup