The US orders civilian federal agencies to remove DeepSeek and covered third-party tools, citing potential data security and supply chain risks.