Regulators found Bank of America failed to fix anti-money-laundering program deficiencies, violating the Bank Secrecy Act and a December 2024 cease-and-desist order