Six quick questions reveal whether Copilot would expose sensitive data in your tenant — and exactly which controls to fix first.