NYC sues Colo. military consulting firm over $5M in pandemic mask money