Judge says classification of group as ‘supply chain risk’ not aligned with stated US national security interests