Colonial Pipeline attack underscores US energy’s vulnerability