Attacker researched bomb-making on YouTube, purchased ingredients, constructed explosive devices before traveling to Boulder, according to criminal complaint