KSI-SCR-MIT: Change from old declarative #42

KSI-SCR-MIT (Mitigating Supply Chain Risk) still uses the old declarative format of KSIs. It needs to be tuned to match the current slightly more passive language:

From: Persistently** identify, review, and mitigate potential supply chain risks.

To: Potential supply chain risks are persistently identified, reviewed, and mitigated.