Model Checking Techniques Applied to Satellite Operational Mode Management