Designing AI for Critical Infrastructure: Why Accuracy Alone Is Not Enough