docs(comments): strip internal task/milestone/bundle bookkeeping from code comments

Remove project bookkeeping citations from shipped code comments across the
solution: hyphenated task IDs (WP-14, StoreAndForward-025), milestone/task/
issue refs (M3, Task 4, Audit Log #23, #21), Bundle X task-bundle labels,
and C/D/K/S/T phase labels.

Comment text only — no code logic, string/log literals, or XML-doc structure
changed. Genuine descriptions are preserved (only the citation is stripped),
and technical lookalikes are retained (UTF-8, SHA-256, T00:00:00, M365,
UTC-5, pre-C4/pre-C5 schema versions). Flagged by the new CommentChecker
TaskReferenceInComment / TrackingReferenceInComment checks plus targeted
grep passes; full solution builds clean, append-only guard tests pass.

src/ZB.MOM.WW.ScadaBridge.AuditLog/Central/AuditLogIngestActor.cs

@@ -71,7 +71,7 @@ public class AuditLogIngestActor : ReceiveActor
         _logger = logger;
 
         ReceiveAsync<IngestAuditEventsCommand>(OnIngestAsync);
-        // The single-repository test ctor cannot service the M3 dual-write —
+        // The single-repository test ctor cannot service the dual-write —
         // it has no SiteCalls repo and no DbContext. The handler still
         // registers (so callers don't dead-letter) but replies empty so the
         // test surface stays explicit about what this ctor supports.
@@ -125,7 +125,7 @@ public class AuditLogIngestActor : ReceiveActor
         // InsertIfNotExistsAsync. The single-repository test ctor has no
         // service provider — it falls through with no redactor, which preserves
         // the small-payload assumptions baked into the existing fixtures.
-        // AuditLog-003: use CreateAsyncScope + await using so scoped EF Core
+        // Use CreateAsyncScope + await using so scoped EF Core
         // services (IAsyncDisposable DbContexts) dispose asynchronously
         // without blocking on sync Dispose() of pending connection cleanup.
         if (_injectedRepository is not null)
@@ -135,7 +135,7 @@ public class AuditLogIngestActor : ReceiveActor
         }
         else
         {
-            // AuditLog-014: guard scope-creation + repository resolution in a
+            // Guard scope-creation + repository resolution in a
             // try/catch, mirroring OnCachedTelemetryAsync. A transient DI /
             // DbContext-factory fault (pooled-context init, SQL-connection
             // exhaustion, a resolution race during host churn) would otherwise
@@ -151,7 +151,7 @@ public class AuditLogIngestActor : ReceiveActor
                 await using var scope = _serviceProvider!.CreateAsyncScope();
                 var repository = scope.ServiceProvider.GetRequiredService<IAuditLogRepository>();
                 var redactor = scope.ServiceProvider.GetService<IAuditRedactor>();
-                // M6 Bundle E (T8): central health counter is best-effort —
+                // Central health counter is best-effort —
                 // unregistered (test composition roots) means the per-row catch
                 // simply logs without surfacing on the health dashboard.
                 var failureCounter = scope.ServiceProvider.GetService<ICentralAuditWriteFailureCounter>();
@@ -194,11 +194,11 @@ public class AuditLogIngestActor : ReceiveActor
                 // retry, reconciliation) is a silent no-op.
                 // Redact BEFORE the IngestedAtUtc stamp so the redacted
                 // copy carries the central-side ingest timestamp. The redactor
-                // is contract-bound to never throw. AuditLog-008: a null
+                // is contract-bound to never throw. A null
                 // redactor (test composition root, no IAuditRedactor
                 // registered) now falls back to the SafeDefault rather than
                 // pass-through, so HTTP header redaction always runs.
-                // C3 transitional shim: IngestedAtUtc is a DetailsJson field on
+                // IngestedAtUtc is a DetailsJson field on
                 // the canonical record, so stamp it via the projection helper.
                 var safeRedactor = redactor ?? SafeDefaultAuditRedactor.Instance;
                 var filtered = safeRedactor.Apply(evt);
@@ -210,7 +210,7 @@ public class AuditLogIngestActor : ReceiveActor
             {
                 // Per-row catch — one bad row never sinks the whole batch.
                 // The row stays Pending at the site; the next drain retries.
-                // M6 Bundle E (T8): bump the central health counter so a
+                // Bump the central health counter so a
                 // sustained insert-throw failure surfaces on the dashboard.
                 try { failureCounter?.Increment(); }
                 catch { /* counter must never throw — defence in depth */ }
@@ -222,7 +222,7 @@ public class AuditLogIngestActor : ReceiveActor
     }
 
     /// <summary>
-    /// M3 dual-write handler. For every <see cref="CachedTelemetryEntry"/> the
+    /// Dual-write handler. For every <see cref="CachedTelemetryEntry"/> the
     /// actor opens a fresh MS SQL transaction, inserts the AuditLog row
     /// idempotently AND upserts the SiteCalls row monotonically. Both succeed
     /// or both roll back, so the audit and operational mirrors never drift
@@ -248,13 +248,13 @@ public class AuditLogIngestActor : ReceiveActor
             var auditRepo = scope.ServiceProvider.GetRequiredService<IAuditLogRepository>();
             var siteCallRepo = scope.ServiceProvider.GetRequiredService<ISiteCallAuditRepository>();
             var dbContext = scope.ServiceProvider.GetRequiredService<ScadaBridgeDbContext>();
-            // Bundle C (M5-T6): resolve the redactor for the whole batch from
+            // Resolve the redactor for the whole batch from
             // the scope; null = SafeDefault for test composition roots that
             // skip the redactor registration. The redactor is contract-bound to
             // never throw, so we can apply it inside the per-entry try
             // without risking an unbounded blast radius.
             var redactor = scope.ServiceProvider.GetService<IAuditRedactor>();
-            // M6 Bundle E (T8): same best-effort central health counter as
+            // Same best-effort central health counter as
             // the OnIngestAsync path — null on test composition roots that
             // skip the registration.
             var failureCounter = scope.ServiceProvider.GetService<ICentralAuditWriteFailureCounter>();
@@ -275,9 +275,9 @@ public class AuditLogIngestActor : ReceiveActor
                     // Redact the audit half BEFORE the dual-write — only the
                     // AuditLog row's payload columns are redactable; SiteCalls
                     // carries operational state only (status, retry count) and
-                    // is left untouched. AuditLog-008: null redactor falls back
+                    // is left untouched. Null redactor falls back
                     // to SafeDefault so header redaction always runs.
-                    // C3 transitional shim: IngestedAtUtc is a DetailsJson field
+                    // IngestedAtUtc is a DetailsJson field
                     // on the canonical record, so stamp it via the projection helper.
                     var safeRedactor = redactor ?? SafeDefaultAuditRedactor.Instance;
                     var filteredAudit = safeRedactor.Apply(entry.Audit);
@@ -298,7 +298,7 @@ public class AuditLogIngestActor : ReceiveActor
                     // EventId is NOT added to `accepted` so the site keeps its
                     // row Pending and retries on the next drain. Other entries
                     // in the batch continue with their own transactions.
-                    // M6 Bundle E (T8): bump the central health counter so a
+                    // Bump the central health counter so a
                     // sustained dual-write failure surfaces on the dashboard.
                     try { failureCounter?.Increment(); }
                     catch { /* counter must never throw — defence in depth */ }