Make Thm.SPEC use lazy_beta_conv instead of beta_conv

The former, unlike the latter, avoids traversing the entire term,
which can take exponentially long in certain degenerate conditions
observed while replaying certain Z3 proof certificates.

Unfortunately, this only fixes the issue for the standard kernel. The
experimental kernel does not seem to be amenable to such a
straightforward fix, as it does not seem to support closures in the
underlying term representation.

Partially fixes #1300

src/thm/std-thm.ML

@@ -563,7 +563,7 @@ fun SPEC t th =
    Assert (Name="!" andalso Thy="bool")
           "SPEC" "Theorem not universally quantified";
    make_thm Count.Spec
-       (tag th, hypset th, beta_conv(mk_comb(Rand, t)))
+       (tag th, hypset th, lazy_beta_conv(mk_comb(Rand, t)))
        handle HOL_ERR _ =>
               raise thm_err "SPEC"
                     "Term argument's type not equal to bound variable's"