Hospital mergers are slowly building monopolies, but regulators rarely intervene