Add focused security regression for sdk-cli allowlisting and document IOC scan + allowlist probe output under .pr/security-evidence-3171.md. Signed-off-by: Frank_zhu <58329837+Frank-zhu0404@users.noreply.github.com>