feat(builtin/kernel): add Hilbert's operator, and derive axiom of choice using it

Signed-off-by: Leonardo de Moura <leonardo@microsoft.com>