Banks are still flying blind on climate risk — and regulators are partly to blame.