HMRC’s draft legislation shows ambition to tackle furlough scheme frauds – but money overpaid to employers will likely be difficult to regain