A series of governance failings and the poor use of public money at the Scottish Police Authority are unacceptable, says the Auditor General.