Epic flags improper access to UPMC patient records by Health Gorilla, prompting a federal lawsuit and HHS Office for Civil Rights report.