How to specify a theorem with a hypothesis in rocq?