Reasoning About Consistency in Model Merging