Re-run sensitivity classification across a KB's documents

202 handle for an enqueued bulk reclassify (ENG-647).

The job runs off-request (Celery): it re-classifies every active document in the KB, honoring manual overrides, and writes an audit row per changed doc.