Astra hitting a potential critical cyber threshold before release, not after an incident, is the first visible case of a lab's own capability evaluation altering a commercial launch decision.