Navigating the Cyber Resilience Act