German federal authorities bought controversial software in 2019; unclear if Berlin's intelligence agencies also used company's tools