strengthen u_löb to provide a boxed impl instead of a wand

this makes it slightlymore annoying to use because we have to elliminate the box. one more reason to have a proof mode ;-)