Company whose train destroyed Lac-Megantic wasn’t focused enough on safety, government sleuths say a year after crash