A Methodology for the Design and Operational Safety Assessment of Unmanned Aerial Systems