Evolving Threats and Emerging Regulations in OT Software Supply Chain Security