allowlist: add suifun domains and related object IDs

[georgegoldman]

Add allowlist entries for Suifun app domains and known safe object IDs used by Suifun.

Domains:

• suifun.io
• app.suifun.io
• www.suifun.io
• staging.suifun.io

Object IDs (created by our published package 0x629...1df14):

• 0x23ce2c0f0ba271968bc12357c4cf28805308e76fe73956f610c8708494fedd37 (connectorV3 root object)
• 0x1d94aa32518d0cb00f9de6ed60d450c9a2090761f326752ffad06b2e9404f845 (shared burn object)
• 0x8ffda1a9c68e99cccacb6aa1de6fabac1b7b0f7826dfceb52b0a9eb56aa4452a (coin metadata)

Rationale:
These objects/domains are used by the Suifun frontend to create/connect to our on-chain connector and coin metadata. Without these entries, wallets may flag legitimate transactions as "malicious assets" and block user flows.

Security notes:

• These objects are created by our published package 0x629db650... (module hi::HI).
• We are the package owners and can provide verification (transaction hashes and package publish details) on request.
• If maintainers require additional audit artifacts (package publish txns or repo links), happy to add them.

Signed-off-by: ()