docs(comments): strip internal task/milestone/bundle bookkeeping from code comments

Remove project bookkeeping citations from shipped code comments across the
solution: hyphenated task IDs (WP-14, StoreAndForward-025), milestone/task/
issue refs (M3, Task 4, Audit Log #23, #21), Bundle X task-bundle labels,
and C/D/K/S/T phase labels.

Comment text only — no code logic, string/log literals, or XML-doc structure
changed. Genuine descriptions are preserved (only the citation is stripped),
and technical lookalikes are retained (UTF-8, SHA-256, T00:00:00, M365,
UTC-5, pre-C4/pre-C5 schema versions). Flagged by the new CommentChecker
TaskReferenceInComment / TrackingReferenceInComment checks plus targeted
grep passes; full solution builds clean, append-only guard tests pass.

src/ZB.MOM.WW.ScadaBridge.CentralUI/Audit/AuditExportEndpoints.cs

@@ -11,7 +11,7 @@ using ZB.MOM.WW.ScadaBridge.Security;
 namespace ZB.MOM.WW.ScadaBridge.CentralUI.Audit;
 
 /// <summary>
-/// Minimal-API endpoint hosting the Audit Log CSV export (#23 M7-T14 / Bundle F).
+/// Minimal-API endpoint hosting the Audit Log CSV export.
 ///
 /// <para>
 /// CentralUI ships no MVC controllers (see <see cref="ZB.MOM.WW.ScadaBridge.CentralUI.Auth.AuthEndpoints"/>
@@ -24,7 +24,7 @@ namespace ZB.MOM.WW.ScadaBridge.CentralUI.Audit;
 ///
 /// <para>
 /// The route is gated on the <see cref="AuthorizationPolicies.AuditExport"/>
-/// policy (#23 M7-T15 / Bundle G) so only roles with the bulk-export
+/// policy so only roles with the bulk-export
 /// permission can pull a CSV — the page-level
 /// <see cref="AuthorizationPolicies.OperationalAudit"/> gate is read-only
 /// and intentionally narrower. The query-string parser silently drops