Other parts of the scheme are broadly on track, but software delays mean care records will be four years late, says NAO