“None of the 10 largest U.S. banks have implemented policies to delay annual bonuses for a broad group of critical employees whose risk-taking could endanger the bank.”