Company directors can be legally liable for failing to manage climate change risks - report