Uefa bears "primary responsibility" for the chaotic scenes before last year's Champions League final, an independent review has found.