Ab initio thermodynamics of oxide surfaces: O 2 on Fe 2 O 3 (0001)