AI cybersecurity is becoming both a defensive market and governance test