Watchdog found energy firm left vulnerable customers at ‘risk of harm’ due to poor monitoring of meters