Pennsylvania’s treasurer is refusing to approve payments for more than $1 million in security upgrades to the private home of Gov. Josh Shapiro