Language Design for Scalable, Extensible Proof Engineering