Over a year and $85bn later, US spies still don’t know ‘where, when or how’ Covid-19 hit – but it ‘could’ve been a lab’