President Joe Biden’s push to put software vendors on the hook for cyberattacks is a significant strategy shift for an industry that has largely escaped legal liability after high-profile hacks.