President Trump has not yet approved a draft strategy that would expand “extreme circumstances” for nuclear retaliation to include a crippling cyberattack.