A leaked Pentagon list flagging dozens of universities as risks blindsided schools and military students alike