Integrating Automatic Verification of Safety Requirements in Railway Interlocking System Design