“Ticketless, drunken and drugged-up thugs” could have caused death at the Euro 2020 final as they attempted to storm Wembley Stadium says an independent review.