docs(comments): strip internal task/milestone/bundle bookkeeping from code comments

Remove project bookkeeping citations from shipped code comments across the
solution: hyphenated task IDs (WP-14, StoreAndForward-025), milestone/task/
issue refs (M3, Task 4, Audit Log #23, #21), Bundle X task-bundle labels,
and C/D/K/S/T phase labels.

Comment text only — no code logic, string/log literals, or XML-doc structure
changed. Genuine descriptions are preserved (only the citation is stripped),
and technical lookalikes are retained (UTF-8, SHA-256, T00:00:00, M365,
UTC-5, pre-C4/pre-C5 schema versions). Flagged by the new CommentChecker
TaskReferenceInComment / TrackingReferenceInComment checks plus targeted
grep passes; full solution builds clean, append-only guard tests pass.

src/ZB.MOM.WW.ScadaBridge.CentralUI/Components/Pages/Admin/ApiKeyForm.razor

@@ -29,7 +29,7 @@
                 @:Add API Key
             }
         </h4>
-        @* Bundle D (#23 M7-T12) drill-in: deep-link into the central Audit Log
+        @* Drill-in: deep-link into the central Audit Log
            pre-filtered to this API key's inbound calls. Inbound audit rows record
            the key Name as Actor and live on the ApiInbound channel. *@
         @if (IsEditMode && !string.IsNullOrWhiteSpace(_formName))
@@ -112,7 +112,7 @@
 </div>
 
 @code {
-    // Inbound-API key re-arch (C3): this form drives the IInboundApiKeyAdmin seam.
+    // Inbound-API key re-arch: this form drives the IInboundApiKeyAdmin seam.
     // Keys are identified by an opaque string KeyId; method access is a set of method
     // NAMES (scopes) carried on the key, replacing the old ApiMethod.ApprovedApiKeyIds CSV.
     // The list of all methods still comes from IInboundApiRepository (methods stay in SQL).

src/ZB.MOM.WW.ScadaBridge.CentralUI/Components/Pages/Admin/ApiKeys.razor

@@ -97,7 +97,7 @@
 </div>
 
 @code {
-    // Inbound-API key re-arch (C3): this page reads keys from the IInboundApiKeyAdmin seam
+    // Inbound-API key re-arch: this page reads keys from the IInboundApiKeyAdmin seam
     // (string KeyId, method-scopes) rather than the SQL Server ApiKey entity. The seam has no
     // retrievable hash, so the old masked Key-Hash column is gone; KeyId identifies each row.
     private List<InboundApiKeyInfo> _keys = new();

src/ZB.MOM.WW.ScadaBridge.CentralUI/Components/Pages/Admin/SiteForm.razor

@@ -22,7 +22,7 @@
         <div class="card-body">
             <div class="d-flex justify-content-between align-items-start">
                 <h6 class="card-title">@(IsEditMode ? "Edit Site" : "Add Site")</h6>
-                @* Bundle D (#23 M7-T12) drill-in: deep-link into the central Audit
+                @* Drill-in: deep-link into the central Audit
                    Log pre-filtered to this site's events. AuditEvent.SourceSiteId
                    stores the SiteIdentifier (string), so we pass that through. *@
                 @if (IsEditMode && !string.IsNullOrWhiteSpace(_formIdentifier))