Test Design and Verification of a Model-Based Spacecraft Thermal Control System