Support allowed scheme with openUrl card action

[compulim]

Feature Request

In the Markdown/sanitize engine, we whitelisted a list of URL schemes.

But on card actions (e.g. Adaptive Cards, hero card, suggested actions, etc), we did not whitelist the URL scheme.

We should whitelist both Markdown and card action with the same list of schemes allowed.

[Enhancement]