emacs: proof general for Coq