A top Customs and Border Protection official said an investigation into a subcontractor’s handling of images taken of travelers crossing the U.S.-Mexico could result in criminal or civil charges.