Automatic Derivation of Causality Restrictions and Verification of Bond Graph Submodels