feat: protect sensitive catalog samples

backend/src/catalog/repository.ts

@@ -108,6 +108,7 @@ interface CatalogColumnTable {
   sourceComment: string | null;
   description: string | null;
   generatedDescription: string | null;
+  sensitive: Generated<boolean>;
   lastSyncedDatabaseVersion: number | null;
   lastSyncedAt: Timestamp | null;
   version: Generated<number>;
@@ -290,6 +291,7 @@ function serializeColumn(row: Selectable<CatalogColumnTable>, foreignKeyCount =
     sourceComment: row.sourceComment,
     description: row.description,
     generatedDescription: row.generatedDescription,
+    sensitive: row.sensitive,
     lastSyncedDatabaseVersion: row.lastSyncedDatabaseVersion,
     lastSyncedAt: row.lastSyncedAt === null ? null : new Date(row.lastSyncedAt).toISOString(),
     version: row.version,
@@ -561,6 +563,7 @@ export class KyselyCatalogRepository implements CatalogRepository {
     expectedVersion: number,
     description: string | null,
     generatedDescription: string | null,
+    sensitive?: boolean,
   ): Promise<CatalogColumn | undefined> {
     const belongs = await this.db.selectFrom("catalogTables").select("id")
       .where("id", "=", tableId).where("databaseId", "=", databaseId).executeTakeFirst();
@@ -568,6 +571,7 @@ export class KyselyCatalogRepository implements CatalogRepository {
     const row = await this.db.updateTable("catalogColumns").set({
       description,
       generatedDescription,
+      ...(sensitive === undefined ? {} : { sensitive }),
       version: sql`version + 1`,
       updatedAt: sql`now()`,
     }).where("id", "=", columnId).where("tableId", "=", tableId)