fix: fix assets controllers changelog (#7990)

## Explanation

PR to fix assets controller changelog.

I had this PR that introduced a breaking change:
https://github.com/MetaMask/core/pull/7923/changes#diff-ee47d03d53776b8dd530799a8047f5e32e36e35765620aeb50b294adc3339fab

Somehow when my PR got merged in this commit
[30f0614](30f0614)
The commit shows my breaking changed under [99.4.0] that was released
here:
https://github.com/MetaMask/core/pull/7944/changes#diff-ee47d03d53776b8dd530799a8047f5e32e36e35765620aeb50b294adc3339fab



## References

<!--
Are there any issues that this pull request is tied to?
Are there other links that reviewers should consult to understand these
changes better?
Are there client or consumer pull requests to adopt any breaking
changes?

For example:

* Fixes #12345
* Related to #67890
-->

## Checklist

- [ ] I've updated the test suite for new or updated code as appropriate
- [ ] I've updated documentation (JSDoc, Markdown, etc.) for new or
updated code as appropriate
- [ ] I've communicated my changes to consumers by [updating changelogs
for packages I've
changed](https://github.com/MetaMask/core/tree/main/docs/processes/updating-changelogs.md)
- [ ] I've introduced [breaking
changes](https://github.com/MetaMask/core/tree/main/docs/processes/breaking-changes.md)
in this PR and have prepared draft pull requests for clients and
consumer packages to resolve them

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Low Risk**
> Documentation-only change that reorders changelog entries; no
behavioral, API, or dependency changes are introduced in code.
> 
> **Overview**
> Moves the Blockaid token security scanning entry (including the
**BREAKING** `MultichainAssetsControllerMessenger` action requirement)
and the `@metamask/phishing-controller` /
`@metamask/network-enablement-controller` bump notes into the
`Unreleased` section of `packages/assets-controllers/CHANGELOG.md`,
correcting their previous placement under `99.4.0`. No runtime code
changes.
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
7ab593b. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

Author: sahar-fehri

packages/assets-controllers/CHANGELOG.md

@@ -7,13 +7,6 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
-### Changed
-
-- Bump `@metamask/phishing-controller` from `^16.2.0` to `^16.3.0` ([#7979](https://github.com/MetaMask/core/pull/7979))
-- Bump `@metamask/network-enablement-controller` from `^4.1.0` to `^4.1.1` ([#7984](https://github.com/MetaMask/core/pull/7984))
-
-## [99.4.0]
-
 ### Added
 
 - **BREAKING:** `MultichainAssetsControllerMessenger` now requires the `PhishingController:bulkScanTokens` action to be allowed ([#7923](https://github.com/MetaMask/core/pull/7923))
@@ -24,6 +17,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   - The filter fails open: if the scan is unreachable or returns an error, all tokens are kept
   - Filtering applies to account-added and asset-list-updated events; `addAssets` (curated list) is not filtered
   - Token addresses are batched into groups of 100 to stay within the `bulkScanTokens` per-request limit
+
+### Changed
+
+- Bump `@metamask/phishing-controller` from `^16.2.0` to `^16.3.0` ([#7979](https://github.com/MetaMask/core/pull/7979))
+- Bump `@metamask/network-enablement-controller` from `^4.1.0` to `^4.1.1` ([#7984](https://github.com/MetaMask/core/pull/7984))
+
+## [99.4.0]
+
+### Added
+
 - `CodefiTokenPricesServiceV2` now supports fetching prices of ETH on Ink Mainnet (chain `0xdef1`) ([#7688](https://github.com/MetaMask/core/pull/7688))
 - Added Chiliz Chain native token ([#7939](https://github.com/MetaMask/core/pull/7939))