Safety as an Instrumental Condition for Achieving System Objectives: A Goal-Oriented Model Grounded in the Principle of Probability Adequacy