Proof that fold_map f l = map f l