Formal Methods to Verify the Power Manager for an Embedded Multiprocessor Cluster