Risks of vendor concentration in critical AI infrastructure