feat: protect sensitive catalog samples

backend/src/routes/catalog-schema.ts

@@ -18,6 +18,7 @@ const metadataSchema = z.object({
   version: z.number().int().positive(),
   description: z.string().max(20_000).nullable(),
   generatedDescription: z.string().max(20_000).nullable(),
+  sensitive: z.boolean().optional(),
 }).strict();
 const createRunSchema = z.object({
   version: z.number().int().positive(),
@@ -117,6 +118,7 @@ export function catalogSchemaRoutes(
           input.version,
           normalized(input.description),
           normalized(input.generatedDescription),
+          input.sensitive,
         );
         if (!updated) return reply.code(409).send({ code: "column_stale", message: "Column metadata changed. Reload and try again." });
         return updated;