Australian regulator says private credit risks contained but ‘could spill over’