CSIS first alerted Ottawa to national-security concerns of two scientists at top disease laboratory