Statistics of Modelling of Passive Heat Removal Systems: A Review with Reference to the Framatome KERENA BWR Reactor: Part I