Verified Null-Move Pruning