A Software Engineering Framework for Secure Cyber Risk Governance in Critical Energy Infrastructure: A PRISMA-Based Systematic Review (VFAST Transactions on Software Engineering, 2026)