Risk management at hedge fund firms has improved a great deal since 2008, with managers wielding tools like stress tests in a more intelligent way. But it may not be enough to protect them in the next crisis.