0-50 == 0, or: add a dedictated monus operator

[Philipp15b]

I've run into a false verification because 0-50 == 0. This is because Caesar infers types UInt for the number literals and then interprets - as truncating at zero. This is extremely confusing. I propose adding a dedicated operator for truncating subtraction at zero and otherwise interpreting - as the usual subtraction.