In a shock offensive, insurgents breach Syria’s largest city for the first time since 2016