The legislation would give EPA new authority to assess cyber risks and require fixes at water utilities while boosting federal cybersecurity funding.