fix: scope and batch sensitive suggestions

backend/test/catalog-schema-routes.test.ts

@@ -241,14 +241,29 @@ test("keeps generated descriptions editable and preserves them across synchroniz
       version: idColumn.version,
       description: "Reviewed key",
       generatedDescription: "Generated key draft",
-      sensitive: true,
+      sensitive: false,
     },
   });
   expect(editedColumn.json()).toMatchObject({
+    description: "Reviewed key",
+    generatedDescription: "Generated key draft",
+    sensitive: false,
+  });
+  const sensitiveOnly = await app.inject({
+    method: "PATCH", url: `/catalog/databases/${database.id}/tables/${patients.id}/columns/${idColumn.id}`,
+    payload: { version: editedColumn.json().version, sensitive: true },
+  });
+  expect(sensitiveOnly.statusCode).toBe(200);
+  expect(sensitiveOnly.json()).toMatchObject({
     description: "Reviewed key",
     generatedDescription: "Generated key draft",
     sensitive: true,
   });
+  const emptyPatch = await app.inject({
+    method: "PATCH", url: `/catalog/databases/${database.id}/tables/${patients.id}/columns/${idColumn.id}`,
+    payload: { version: sensitiveOnly.json().version },
+  });
+  expect(emptyPatch.statusCode).toBe(400);
 
   const second = await app.inject({ method: "POST", url: `/catalog/databases/${database.id}/sync-runs`, payload: { version: database.version, scope: "all", tableIds: [] } });
   await waitFor(repository, second.json().id, "succeeded");