add theory of schedules with swaps

This patch adds functions for transforming a given schedule either by
replacing the allocation at a given point, or by swapping the allocations
at two points, together with a bunch of supporting lemmas and service
invariants.