The Sri Lankan government and Tamil Tiger rebels both carried out possible war crimes in the final months before their long war ended, a UN report says.