Three major federal cybersecurity policy actions have landed in the span of roughly nine months. Taken individually, each one represents a meaningful shift. Taken together, they are redrawing the baseline for what it means to qualify for federal government work — and…