NHS apologises and admits Palantir engineers have access to identifiable patient data