Gaps in Ottawa’s detection of citizenship fraud, auditor finds