C3: Learning Congestion Controllers with Formal Certificates