From Google to JPMorgan, the message is getting out that return-to-office mandates aren't optional and punitive measures may be next. But employers face risks.