make Stop instruction take a boolean

to indicate success/failure, so the REPL knows how to continue
update compiler implementation to distinguish success/failure

return a different next state in either case
fix proofs for new compiler and new stop instruction
fix compile_top_thm, and prove the second case