UnitedHealth misled investors, shuttered an internal Medicare billing audit and ignored cybersecurity lapses that led to the historic Change Healthcare cyberattack, according to a lawsuit filed by two shareholder groups.