A formal proof of Wilson's Theorem