Model-Checking based on Fluid Petri Nets for the Temperature Control System of the ICARO Co-generative Plant