docs(comments): strip internal task/milestone/bundle bookkeeping from code comments

Remove project bookkeeping citations from shipped code comments across the
solution: hyphenated task IDs (WP-14, StoreAndForward-025), milestone/task/
issue refs (M3, Task 4, Audit Log #23, #21), Bundle X task-bundle labels,
and C/D/K/S/T phase labels.

Comment text only — no code logic, string/log literals, or XML-doc structure
changed. Genuine descriptions are preserved (only the citation is stripped),
and technical lookalikes are retained (UTF-8, SHA-256, T00:00:00, M365,
UTC-5, pre-C4/pre-C5 schema versions). Flagged by the new CommentChecker
TaskReferenceInComment / TrackingReferenceInComment checks plus targeted
grep passes; full solution builds clean, append-only guard tests pass.

src/ZB.MOM.WW.ScadaBridge.CentralUI/Auth/SiteScopeService.cs

@@ -6,7 +6,7 @@ namespace ZB.MOM.WW.ScadaBridge.CentralUI.Auth;
 
 /// <summary>
 /// Resolves the set of sites the current user is permitted to operate on, from
-/// the <c>SiteId</c> claims attached at login (CentralUI-002).
+/// the <c>SiteId</c> claims attached at login.
 /// <para>
 /// The design (Component-CentralUI, CLAUDE.md "Security &amp; Auth") makes the
 /// Deployment role site-scoped: a Deployment user mapped through an LDAP group
@@ -93,7 +93,7 @@ public sealed class SiteScopeService
         }
 
         // No SiteId claims => system-wide. Absence of scope rules means an
-        // unrestricted deployer (Security-017 made this service the sole
+        // unrestricted deployer (this service is the sole
         // site-scoping mechanism — there is no separate handler to mirror).
         var result = (IsSystemWide: ids.Count == 0, Sites: (IReadOnlySet<int>)ids);
         _cached = result;