Warning after worker stole £1m from city council over 17 years