The national police force has been quietly using “third-party” surveillance companies to search social media, including private accounts in “Project Wideawake,” a new report finds.