I think this is an overly cynical read on the whole thing, at least after skimming the main points from the bill.

A lot of it is about designating critical suppliers + providers and their security obligations.

Central government would typically be a customer, that uses other suppliers and providers to achieve its goals, not a supplier or a provider itself.

So in that sense it doesn't seem so strange to see it omitted, or at least for first set of legislation etc.? Get the first party suppliers in shape first, then legislate the net result of government function using those suppliers etc.