Causal Surrogate Models: Adding "What If" to Cyber-Physical System Testing