Provably Safe Neural Network Controllers via Differential Dynamic Logic Samuel Teuber