The government acted lawfully when it labeled the AI company a supply chain risk, the judges wrote in a 2-1 decision.