US regulators sue SolarWinds and its security chief for alleged cyber neglect ahead of Russian hack