Microsoft expands DLP controls to prevent Copilot from processing confidential Office files across local devices, SharePoint, and OneDrive.