A Machine-Verified Proof of Linearizability for a Queue Algorithm