Recursive: empty l1 trivially holds; otherwise the head is in l2 (via membero) and the tail is a subset. Duplicates in l1 are allowed since each is independently checked. 7 new tests, 456/456 cumulative.
