Chinese dairy Sanlu Group knew about the contamination of its milk powder for eight months before telling authorities, a state investigation has found.