US regulators have made significant progress on climate-related risks, scorecard finds