Quantifying Propagation Risk in Distributed Critical Infrastructures: A Unified Framework for AI Failures and GPS Spoofing (IEEE Access, 2026)