The new guidance relies on an “activities-based” approach to identifying the risks a nonbank may pose to the financial system.