Formalize the cumulative hierarchy V (most of §10.5 of the book)

This is joint work with Bas Spitters.
It formalizes exercise 10.11 (the "pushout" definition of V), where we had to slightly modify the induction principle given in the book in order to make it provable (see V_rect').
Then most of section 10.5 is proven (up to theorem 10.5.8).
This should be `(** * The cumulative hierarchy [V] *)`; we're following the convention that each file gets a top-level `*` for a "chapter" heading, and each section within it gets two `*`s.