“U.S. Central Command has failed to apply lessons from conflicts like the one in Ukraine regarding base vulnerability, such as hardening targets and dispersing aircraft.”