Heads of congressional panels say Baidu, JD.com and others have military links that pose ‘unacceptable risk’ to investors