EU let member states rewrite targets after they had sought recovery-fund payment, auditors find