docs(comments): strip internal task/milestone/bundle bookkeeping from code comments

Remove project bookkeeping citations from shipped code comments across the
solution: hyphenated task IDs (WP-14, StoreAndForward-025), milestone/task/
issue refs (M3, Task 4, Audit Log #23, #21), Bundle X task-bundle labels,
and C/D/K/S/T phase labels.

Comment text only — no code logic, string/log literals, or XML-doc structure
changed. Genuine descriptions are preserved (only the citation is stripped),
and technical lookalikes are retained (UTF-8, SHA-256, T00:00:00, M365,
UTC-5, pre-C4/pre-C5 schema versions). Flagged by the new CommentChecker
TaskReferenceInComment / TrackingReferenceInComment checks plus targeted
grep passes; full solution builds clean, append-only guard tests pass.

src/ZB.MOM.WW.ScadaBridge.CentralUI/Auth/ClaimsPrincipalExtensions.cs

@@ -5,7 +5,7 @@ using ZB.MOM.WW.ScadaBridge.Security;
 namespace ZB.MOM.WW.ScadaBridge.CentralUI.Auth;
 
 /// <summary>
-/// Claim-lookup helpers for the Central UI. CentralUI-024: claim types are owned
+/// Claim-lookup helpers for the Central UI. Claim types are owned
 /// by <see cref="JwtTokenService"/> (the single source of truth). These helpers
 /// resolve them through the <c>JwtTokenService</c> constants so a rename there
 /// propagates here instead of silently breaking ten copy-pasted call sites.
@@ -36,7 +36,7 @@ public static class ClaimsPrincipalExtensions
     /// <summary>
     /// Resolves the current user's audit username from the auth state provider.
     /// Replaces the <c>GetCurrentUserAsync</c> helper that was copy-pasted into
-    /// ten components (CentralUI-024).
+    /// ten components.
     /// </summary>
     /// <param name="authStateProvider">The Blazor authentication state provider to read from.</param>
     /// <returns>A task that resolves to the current user's audit username, or <see cref="UnknownUser"/> if not authenticated.</returns>