UEFA-appointed investigators said the football body bears the "primary responsibility" for security failures at the 2022 Champions League final.