STPA-FTA hybrid hazard analysis framework applied to a high integrity pressure protection system