Describir: Formalizing alternating-time temporal logic in the coq proof assistant