The federal traffic safety agency sent mixed signals on Massachusetts’ expanded vehicle repair law before telling automakers not to comply, citing vehicle cyber risk.