Cyber Resilience Act: cybersecurity of digital products and ancillary services