Extending Structural Test Coverage Criteria for Lustre Programs with Multi-clock Operators