docs(tests): fix CommentChecker findings across tests/ — 13,392 → 0 (repo-wide scan clean)

Comment/XML-doc changes only:
- add summaries to ~10k test methods, fixtures, fakes and helpers
  (+ <param> on theories, <returns> on async Task methods,
  <inheritdoc/> on interface implementations the checker can resolve)
- strip ~2.6k project-tracking references (WP*, P*-*, row-NN, Task N,
  #NN, Component-0NN) from comments, keeping the explanatory text;
  reword false positives in comments only
- real docs on fakes implementing BCL/library interfaces
  (IDisposable, ILogger, IOptionsMonitor, IAsyncLifetime)
- reword the last 5 src/ false positives (CWE-1236, failures-1,
  year-0001, M365)

Only non-comment edits: four one-line nested classes split across lines
so members can carry docs. Build 0 errors / 0 warnings.

tests/ZB.MOM.WW.ScadaBridge.AuditLog.Tests/Integration/InboundApiAuditTests.cs

@@ -24,7 +24,7 @@ using System.Text.Encodings.Web;
 namespace ZB.MOM.WW.ScadaBridge.AuditLog.Tests.Integration;
 
 /// <summary>
-/// Audit Log #23 — M4 Bundle E (Task E3) end-to-end audit trail for the
+/// End-to-end audit trail for the
 /// inbound API surface. Wires the production
 /// <see cref="AuditWriteMiddleware"/> into a Microsoft.AspNetCore.TestHost
 /// pipeline that mirrors the production
@@ -53,6 +53,8 @@ public class InboundApiAuditTests : IClassFixture<MsSqlMigrationFixture>
 {
     private readonly MsSqlMigrationFixture _fixture;
 
+    /// <summary>Initializes the test class with the shared MS SQL migration fixture.</summary>
+    /// <param name="fixture">The shared MS SQL migration fixture.</param>
     public InboundApiAuditTests(MsSqlMigrationFixture fixture)
     {
         _fixture = fixture;
@@ -144,12 +146,17 @@ public class InboundApiAuditTests : IClassFixture<MsSqlMigrationFixture>
     /// </summary>
     private sealed class AlwaysAuthenticatedHandler : AuthenticationHandler<AuthenticationSchemeOptions>
     {
+        /// <summary>Initializes the handler with the standard authentication-handler dependencies.</summary>
+        /// <param name="options">The authentication scheme options monitor.</param>
+        /// <param name="logger">The logger factory.</param>
+        /// <param name="encoder">The URL encoder.</param>
         public AlwaysAuthenticatedHandler(
             Microsoft.Extensions.Options.IOptionsMonitor<AuthenticationSchemeOptions> options,
             Microsoft.Extensions.Logging.ILoggerFactory logger,
             UrlEncoder encoder)
             : base(options, logger, encoder) { }
 
+        /// <inheritdoc />
         protected override Task<AuthenticateResult> HandleAuthenticateAsync()
         {
             var identity = new ClaimsIdentity(
@@ -200,6 +207,8 @@ public class InboundApiAuditTests : IClassFixture<MsSqlMigrationFixture>
         return Assert.Single(finalRows);
     }
 
+    /// <summary>Verifies that a post with a valid actor emits a delivered inbound-request audit row with HTTP status 200 and the actor populated.</summary>
+    /// <returns>A task that represents the asynchronous operation.</returns>
     [SkippableFact]
     public async Task PostToApi_WithValidActor_Emits_InboundRequest_StatusDelivered_HttpStatus200_ActorPopulated()
     {
@@ -232,6 +241,8 @@ public class InboundApiAuditTests : IClassFixture<MsSqlMigrationFixture>
         Assert.NotNull(evt.AsRow().IngestedAtUtc);
     }
 
+    /// <summary>Verifies that a post without authentication emits a failed inbound-auth-failure audit row with HTTP status 401 and no actor.</summary>
+    /// <returns>A task that represents the asynchronous operation.</returns>
     [SkippableFact]
     public async Task PostToApi_Without_Auth_Emits_InboundAuthFailure_StatusFailed_HttpStatus401_ActorNull()
     {
@@ -260,12 +271,14 @@ public class InboundApiAuditTests : IClassFixture<MsSqlMigrationFixture>
         Assert.Equal(AuditStatus.Failed, evt.AsRow().Status);
         Assert.Equal(401, evt.AsRow().HttpStatus);
         // Never echo back an unauthenticated principal — middleware suppresses
-        // the framework user resolution on 401/403 paths. C3 (Task 2.5): the
+        // the framework user resolution on 401/403 paths. The
         // canonical Actor is a non-null string (empty when absent); the row view
         // maps empty → null, preserving the "no principal" assertion.
         Assert.Null(evt.AsRow().Actor);
     }
 
+    /// <summary>Verifies that a post whose endpoint returns 500 emits a failed inbound-request audit row with HTTP status 500.</summary>
+    /// <returns>A task that represents the asynchronous operation.</returns>
     [SkippableFact]
     public async Task PostToApi_Returning500_Emits_InboundRequest_StatusFailed_HttpStatus500()
     {