The SEC is investigating Melvin Capital Management's risk controls and investor disclosure after the hedge fund was crippled by the meme-stock rally last year.