`sed -i 's/frag_auth_op/frac_auth_frag_op/g' $(find -name "*.v")`

accessor-style iInv without Hclose

See merge request FP/iris-coq!143

fix `head_stuck`

See merge request FP/iris-coq!144

Derive löb induction from later introduction and guarded fixpoints

See merge request FP/iris-coq!145

- Make `flöb_pre` and `flöb` local to the proof.
- The metavariables `Ψ` are used for predicates, so use a `Q` here.

It now turns the goal into `P` and `<pers> Q`, which is dual to
`iDestruct`, which turns `P ∧ <pers> Q` into `P` and `□ Q`.

This follows the proof at https://en.wikipedia.org/wiki/L%C3%B6b's_theorem#Proof_of_L%C3%B6b's_theorem

If the accessor introduces a binder, the first Coq-level intro pattern of `iInv`
is used for that binder unless the type of the binder is unit, in which case
`iInv` removes it completely.  Binders on the closing view shift are not (yet)
supported as they are harder to smoothly eliminate in the unit case.