Tracing the risk propagation pathways of user behavior during the operation and maintenance phase of building-integrated photovoltaics