Which federal law most directly creates the legal foundation for requiring compliance training programs in healthcare organizations receiving Medicare and Medicaid funds?