Agency progress stalls on key high-risk list challenges, GAO says