[aorai] fix spec of transition functions in presence of multiple actions

Actions are sequential, which means that `$x=foo; $y = $x;` must be specified
as `ensures aorai_y == aorai_x;`, not `\old(aorai_x)`.