In the high-stakes race to secure government contracts, many vendors are discovering an unexpected obstacle: the government’s cybersecurity standards.