A modern Isabelle-based prover for VDM's logic of partial functions