US holds off blacklisting China's DeepSeek, more than 100 firms deemed security risks, sources say