If the FDA’s findings are correct, a foreign company used its trusted designation to move GLP-1 ingredients of unknown origin into the American drug supply.