State Department investigators probing Hillary Clinton’s use of a private email server as secretary of state discovered nearly 600 security violations by 38 people, some of whom may face disciplinary action.