Merge "Add per-file OWNER for SensitiveContentProtection" into main