The Pentagon has suspended a major upcoming cybersecurity mandate for defense contractors, halting a requirement for costly third-party audits that officials said was driving small businesses out of the defense supply chain.