The UK trumpets new register to rein in kleptocrats but it’s six years late and riddled with loopholes