European digital sovereignty in practice: cloud standards, procurement filters and the gap between regulation and industry.