Gregory Aymond promised ‘to be transparent’ – but a Guardian investigation found that he hid allegations, and an expert questions whether it was against Vatican policy