Model-Checking Based on Fluid Petri Nets for the Temperature Control System of the ICARO Co-generative Plant