A federal judge on Monday questioned the legality of allowing states to check their voting lists against Homeland Security’s citizenship database, but ruled that she can’t shut the program down — yet.