Proof-oriented Programming in F*