Former Shin Bet chief Yaakov Peri of CGI Group says his company was hired to review security at Dresden museum, communicated with thief on dark web