Allow developers to flag PII in the catalog

Many sources have PII which can be flagged in the catalog if we have a convention to do so.

Downstream, this can be surfaced to a user who is interrogating the catalog, and it can potentially also be flagged for obfuscation within Meltano (most likely0 or downstream by the target (less likely).