docs(comments): strip internal task/milestone/bundle bookkeeping from code comments

Remove project bookkeeping citations from shipped code comments across the
solution: hyphenated task IDs (WP-14, StoreAndForward-025), milestone/task/
issue refs (M3, Task 4, Audit Log #23, #21), Bundle X task-bundle labels,
and C/D/K/S/T phase labels.

Comment text only — no code logic, string/log literals, or XML-doc structure
changed. Genuine descriptions are preserved (only the citation is stripped),
and technical lookalikes are retained (UTF-8, SHA-256, T00:00:00, M365,
UTC-5, pre-C4/pre-C5 schema versions). Flagged by the new CommentChecker
TaskReferenceInComment / TrackingReferenceInComment checks plus targeted
grep passes; full solution builds clean, append-only guard tests pass.

src/ZB.MOM.WW.ScadaBridge.CentralUI/ScriptAnalysis/ScriptAnalysisService.cs

@@ -224,7 +224,7 @@ public class ScriptAnalysisService
                 SandboxErrorKind.CompileError, 0, markers);
         }
 
-        // Trust-model gate (CentralUI-001): the documented forbidden-API set is
+        // Trust-model gate: the documented forbidden-API set is
         // enforced HERE, before execution — not merely surfaced as an editor hint.
         // Without this, a Design-role user could run arbitrary file/process/
         // reflection/network code in the central host process.
@@ -332,7 +332,7 @@ public class ScriptAnalysisService
                     throw new ScriptSandboxException(
                         $"Scripts.CallShared(\"{name}\") compile failed: {string.Join("; ", nestedErrors.Select(d => d.GetMessage()))}");
 
-                // Trust-model gate (CentralUI-001) — a nested shared script runs
+                // Trust-model gate — a nested shared script runs
                 // arbitrary code too, so it must clear the same forbidden-API gate.
                 if (EnforceTrustModel(built.GetCompilation()).Count > 0)
                     throw new ScriptSandboxException(
@@ -384,7 +384,7 @@ public class ScriptAnalysisService
                 Instance = instanceContext,
             };
 
-        // Console capture is routed per-call via an AsyncLocal scope (CentralUI-003).
+        // Console capture is routed per-call via an AsyncLocal scope.
         // Console.Out is process-global, so it must NOT be redirected per run — two
         // concurrent Test Runs would interleave output and the first to finish would
         // restore Console.Out while the other is still writing. SandboxConsoleCapture
@@ -985,7 +985,7 @@ public class ScriptAnalysisService
 
     /// <summary>
     /// Resolves the called script's shape from the metadata in scope for its kind.
-    /// CentralUI-013: the shared-script catalog is awaited rather than blocked on
+    /// The shared-script catalog is awaited rather than blocked on
     /// with <c>.GetAwaiter().GetResult()</c>, so this method is async — and
     /// <see cref="Hover"/> / <see cref="SignatureHelp"/> are async with it.
     /// </summary>
@@ -1207,7 +1207,7 @@ public class ScriptAnalysisService
     /// <summary>
     /// The forbidden namespace/type a symbol implicates, or null if it is allowed.
     /// Checks the symbol's namespace and — for a type or member — the type's full
-    /// name. M3.5: the allowed-exception carve-out is applied at the WHOLE-SYMBOL
+    /// name. The allowed-exception carve-out is applied at the WHOLE-SYMBOL
     /// level (mirroring the shared <see cref="SharedTrust.ScriptTrustValidator"/>
     /// semantic pass), so a type whose full name is an allowed exception
     /// (e.g. <c>System.Threading.CancellationTokenSource</c>) is NOT flagged even
@@ -1233,7 +1233,7 @@ public class ScriptAnalysisService
 
     /// <summary>
     /// Fully-qualified names a symbol reference implicates for trust-model checking.
-    /// M3.5: a bare namespace symbol is intentionally ignored — mirroring the shared
+    /// A bare namespace symbol is intentionally ignored — mirroring the shared
     /// <see cref="SharedTrust.ScriptTrustValidator"/> semantic pass. A namespace name
     /// on its own performs no action; harm requires referencing a type or member, so
     /// flagging the bare <c>System.Threading</c> qualifier of an otherwise-allowed
@@ -1269,7 +1269,7 @@ public class ScriptAnalysisService
             : type.Name;
 
     /// <summary>
-    /// M3.5: the forbidden-namespace verdict for the editor walker is sourced
+    /// The forbidden-namespace verdict for the editor walker is sourced
     /// from the shared <see cref="SharedTrust.ScriptTrustPolicy"/> — the single
     /// deny-list the run gate (<see cref="ScriptTrustValidator"/>) also uses, so
     /// the editor squiggle and the run gate agree on which namespaces are
@@ -1290,7 +1290,7 @@ public class ScriptAnalysisService
         || actual.StartsWith(root + ".", StringComparison.Ordinal);
 
     /// <summary>
-    /// Pre-execution trust-model gate (CentralUI-001). M3.5: the VERDICT is
+    /// Pre-execution trust-model gate. The VERDICT is
     /// delegated to the shared <see cref="SharedTrust.ScriptTrustValidator"/> —
     /// the single source of truth the editor squiggle deny-list also derives from,
     /// so the run gate and the editor agree. The shared validator additionally