Tech biz must tell us about more security breaches, says UK.gov as it ponders lowering report thresholds