Promela fixes

[Rorck]

Added acceptance cycle as result.

Modified trivial branch serialization: previous version caused unwanted acceptance cycles because of the true guard:

:: true -> atomic {
    «action.serialize»
}

now the guard has to be evaluated at every step, causing valid acceptance cycle counter-examples:

:: «action.serialize» -> atomic {
    skip
}