Pass per-instance property sensitivity from resource catalog to resource harness

Per PUP-6435, Puppet::Resource instances will have additional metadata indicating that some properties are sensitive. This information needs to be passed from resources/the resource catalog down to the resource harness during catalog application so that we can perform the necessary event redaction. Ultimately, when the resource harness is synchronizing individual properties it needs to determine if a change event should be redacted, so this information ultimately needs to land in Puppet::Property instances.