How Data Loss Prevention policies and sensitivity labels interact with Microsoft 365 Copilot, where the protection model works, and where it quietly fails.