Bounding the risk of crew loss following orbital debris penetration of the International Space Station at assembly stages 1J and 1E