Data giant Palantir’s murky track record raises alarming questions about secret, potentially illegal £23 million NHS deal