Shotgun owners face a “postcode lottery” when applying for firearms certificates, with some police forces taking over a year to process new applications, a report has warned.