Cyber insurance war exclusion clauses now decide whether a state-backed attack gets covered at all. Here's why the exact wording matters so much.