Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

Author: souvikghosh04

src/Core/Resolvers/DWSqlQueryBuilder.cs

@@ -442,10 +442,8 @@ public string Build(SqlUpsertQueryStructure structure)
             string pkPredicates = JoinPredicateStrings(Build(structure.Predicates));
 
             // Predicates by virtue of PK + database policy for the update operation.
-            // The database policy must be applied to the UPDATE statement's WHERE clause so that
-            // an upsert which resolves to an update only affects rows the caller is authorized to modify.
-            // Omitting it would (a) apply the update to every row in the table since only the SET clause
-            // would remain, and (b) bypass any row-level update policy. See MsSqlQueryBuilder for parity.
+            // PK predicates ensure the UPDATE targets only the requested row(s); the database policy predicate
+            // further restricts updates to rows the caller is authorized to modify. See MsSqlQueryBuilder for parity.
             string updatePredicates = JoinPredicateStrings(pkPredicates, structure.GetDbPolicyForOperation(EntityActionOperation.Update));
 
             string updateOperations = Build(structure.UpdateOperations, ", ");