All the `env` operations are prefixed `env_`, so this is more consistent.

pm_reduce just reduces away proof mode terms using cbv; pm_prettify just prettifies user-visible connectors using cbn.
Most uses of pm_default are converted to default to keep the desired reduction behavior.

List literals reduce with a spurious `emp` at the end, which is not pretty.

With a pretty proof by Robbert

make pm_maybe_wand a BI connective; reduce BI connectives and option combinators in the proofmode with cbn

* move PROP-envs definitions to environments.v so that we can control them without pulling in coq_tactics
* use reduction-controlled `pm_default` for proofmode accessors