Four in 10 American firms ‘could leave Hong Kong over national security law’