Former federal officials and industry experts say vendors and agencies face supply chain risks when they put so many of their eggs in one reseller’s basket.