New climate risk ranking finds these companies largely operate “out of the public eye and often beyond the oversight of financial and environmental regulators.”