The nation’s cybersecurity agency has released an election infrastructure security plan 40 days before November’s midterms