US holds off blacklisting DeepSeek, more than 100 firms deemed security risks