Most companies know little of their suppliers' ESG practices. But negative incidents can sway stock prices—and investors should take note