docs(comments): strip internal task/milestone/bundle bookkeeping from code comments

Remove project bookkeeping citations from shipped code comments across the
solution: hyphenated task IDs (WP-14, StoreAndForward-025), milestone/task/
issue refs (M3, Task 4, Audit Log #23, #21), Bundle X task-bundle labels,
and C/D/K/S/T phase labels.

Comment text only — no code logic, string/log literals, or XML-doc structure
changed. Genuine descriptions are preserved (only the citation is stripped),
and technical lookalikes are retained (UTF-8, SHA-256, T00:00:00, M365,
UTC-5, pre-C4/pre-C5 schema versions). Flagged by the new CommentChecker
TaskReferenceInComment / TrackingReferenceInComment checks plus targeted
grep passes; full solution builds clean, append-only guard tests pass.

src/ZB.MOM.WW.ScadaBridge.CentralUI/Components/Forms/OpcUaEndpointEditor.razor

@@ -349,7 +349,7 @@
     [Parameter] public bool IsLegacy { get; set; }
     [Parameter] public ValidationResult? Errors { get; set; }
 
-    // Verify-endpoint context (M7 T17): the site + connection identity the verify
+    // Verify-endpoint context (M7): the site + connection identity the verify
     // probe targets. Supplied by DataConnectionForm (_formSiteId → SiteIdentifier,
     // _formName, _protocol). When SiteIdentifier is blank the connection has not been
     // assigned a site yet, so verification is unavailable.
@@ -394,7 +394,7 @@
         }
     }
 
-    // M7 T17: trust the captured untrusted server certificate at every node of the
+    // M7: trust the captured untrusted server certificate at every node of the
     // owning site, then re-run Verify (which should now succeed and clear the cert
     // panel). Administrator-gated by the AuthorizeView wrapping the button; the
     // CertManagementService enforces the same role server-side-of-the-trust-boundary.