docs(tests): fix CommentChecker findings across tests/ — 13,392 → 0 (repo-wide scan clean)

Comment/XML-doc changes only:
- add summaries to ~10k test methods, fixtures, fakes and helpers
  (+ <param> on theories, <returns> on async Task methods,
  <inheritdoc/> on interface implementations the checker can resolve)
- strip ~2.6k project-tracking references (WP*, P*-*, row-NN, Task N,
  #NN, Component-0NN) from comments, keeping the explanatory text;
  reword false positives in comments only
- real docs on fakes implementing BCL/library interfaces
  (IDisposable, ILogger, IOptionsMonitor, IAsyncLifetime)
- reword the last 5 src/ false positives (CWE-1236, failures-1,
  year-0001, M365)

Only non-comment edits: four one-line nested classes split across lines
so members can carry docs. Build 0 errors / 0 warnings.

tests/ZB.MOM.WW.ScadaBridge.CentralUI.Tests/Auth/CookieAuthenticationStateProviderTests.cs

@@ -5,7 +5,7 @@ using ZB.MOM.WW.ScadaBridge.CentralUI.Auth;
 namespace ZB.MOM.WW.ScadaBridge.CentralUI.Tests.Auth;
 
 /// <summary>
-/// Regression tests for CentralUI-004. The provider used to read
+/// Regression tests for the cookie authentication state provider. The provider used to read
 /// <see cref="IHttpContextAccessor.HttpContext"/> on every call; once the Blazor
 /// circuit is established that context is gone, so later re-evaluations saw an
 /// unauthenticated principal. The provider must snapshot the principal once at
@@ -21,6 +21,8 @@ public class CookieAuthenticationStateProviderTests
         return new ClaimsPrincipal(identity);
     }
 
+    /// <summary>Verifies that the provider returns the authenticated user while the HTTP context is present.</summary>
+    /// <returns>A task that represents the asynchronous operation.</returns>
     [Fact]
     public async Task GetAuthenticationStateAsync_ReturnsAuthenticatedUser_WhenHttpContextPresent()
     {
@@ -36,6 +38,8 @@ public class CookieAuthenticationStateProviderTests
         Assert.Equal("alice", state.User.Identity?.Name);
     }
 
+    /// <summary>Verifies that the provider still returns the user after the HTTP context is gone.</summary>
+    /// <returns>A task that represents the asynchronous operation.</returns>
     [Fact]
     public async Task GetAuthenticationStateAsync_StillReturnsUser_AfterHttpContextIsGone()
     {
@@ -57,6 +61,8 @@ public class CookieAuthenticationStateProviderTests
         Assert.Equal("bob", state.User.Identity?.Name);
     }
 
+    /// <summary>Verifies that the provider returns the same user across calls and ignores a stale foreign HTTP context.</summary>
+    /// <returns>A task that represents the asynchronous operation.</returns>
     [Fact]
     public async Task GetAuthenticationStateAsync_IsStableAcrossCalls_IgnoringStaleForeignContext()
     {