Credit Suisse Group AG overlooked red flags for years while a rogue private banker stole from billionaire clients, according to a report by a law firm for Switzerland’s financial regulator.