Administrators reportedly had multiple warnings that the unidentified boy was armed, but "failed to act" on those reports, the lawsuit claims.