“OpenAI concluded it could not rule out that its Astra model has "critical cyber capabilities" under its preparedness framework.”