docs(src): fix CommentChecker findings across src/ — 1,032 → 5 (all false positives)

Comment/XML-doc changes only, no code logic:
- strip project-tracking references (WP*, P*-*, row-NN, #NN, Task N) from
  comments, keeping the explanatory rationale
- add missing summaries, <param>, <returns>, <typeparam> and <inheritdoc/>
- replace misused <inheritdoc/> with real docs; where <inheritdoc/> was
  combined with useful remarks, move the rationale into // comments
- drop stale replicationActor <param> on DeploymentManagerActor ctor

Remaining 5 are false positives (CWE-1236 x2, failures-1, year-0001, M365).
Build 0 errors / 0 warnings.

src/ZB.MOM.WW.ScadaBridge.CentralUI/Auth/ClaimsPrincipalExtensions.cs

@@ -13,11 +13,16 @@ namespace ZB.MOM.WW.ScadaBridge.CentralUI.Auth;
 public static class ClaimsPrincipalExtensions
 {
     /// <summary>Gets fresh mutation authority, failing closed on a mapping error.</summary>
+    /// <param name="provider">The authentication state provider.</param>
+    /// <returns>The authoritative authentication state.</returns>
     public static Task<AuthenticationState> GetAuthoritativeStateAsync(this AuthenticationStateProvider provider)
         => provider is CookieAuthenticationStateProvider cookie
             ? cookie.GetAuthoritativeStateAsync() : provider.GetAuthenticationStateAsync();
 
     /// <summary>Checks the current grant before invoking a directly audited application service.</summary>
+    /// <param name="provider">The authentication state provider.</param>
+    /// <param name="role">The role the current session must hold.</param>
+    /// <returns>The username of the authorized principal.</returns>
     public static async Task<string> RequireRoleAsync(this AuthenticationStateProvider provider, string role)
     {
         var principal = (await provider.GetAuthoritativeStateAsync()).User;