IRS: Review of 1 million ERC claims reveals most show signs of risk