Deepfake attacks have moved from cyber briefings to boardroom emergencies with every CEO likeness a potential vulnerability. Most companies have no plan.