A 22-year-old college student put in charge of Philadelphia’s largest COVID-19 vaccination site took doses home to inject his friends