Top banking regulator blames SVB collapse on ‘mismanagement’ but insists vulnerability was ‘not apparent until the unexpected bank run’