fix: Add warning comment to createTracker public call

Author: mattrmc1

lib/sdk/server-ai/src/main/java/com/launchdarkly/sdk/server/ai/LDAIClient.java

@@ -89,6 +89,10 @@ AIJudgeConfig judgeConfig(
    * stores the resumption token from a previous tracker (via
    * {@link LDAIConfigTracker#getResumptionToken()}) and passes it back here to continue tracking
    * against the same run.
+   * <p>
+   * <strong>Security note:</strong> resumption tokens embed flag-evaluation details such as the
+   * variation key and config version. Keep tokens server-side and do not round-trip them through
+   * untrusted clients where they could leak flag-targeting information.
    *
    * @param resumptionToken the token returned by a previous tracker; must not be {@code null}
    * @param context the evaluation context for the new request; must not be {@code null}