CJC: An Extensible Checker for the CleanJava Annotation Language