During COVID, SBA moved fast to deliver disaster loans, but GAO says limited access to IRS tax data made oversight harder and increased program risk