The bureau managing the city’s retirement funds has not kept up with the times and lacks basic tools to identify risk, according to an independent report commissioned by the city comptroller’s office.