The passenger rails agency is to act against officials implicated in former public protector Thuli Madonsela’s 2015 report on corruption and maladministration