Formally Verified Code Obfuscation in the Coq Proof Assistant