A memo from the department’s Office of Legal Counsel formalized earlier guidance that said a new version of the app did not pose data or national security risks.