docs(comments): strip internal task/milestone/bundle bookkeeping from code comments

Remove project bookkeeping citations from shipped code comments across the
solution: hyphenated task IDs (WP-14, StoreAndForward-025), milestone/task/
issue refs (M3, Task 4, Audit Log #23, #21), Bundle X task-bundle labels,
and C/D/K/S/T phase labels.

Comment text only — no code logic, string/log literals, or XML-doc structure
changed. Genuine descriptions are preserved (only the citation is stripped),
and technical lookalikes are retained (UTF-8, SHA-256, T00:00:00, M365,
UTC-5, pre-C4/pre-C5 schema versions). Flagged by the new CommentChecker
TaskReferenceInComment / TrackingReferenceInComment checks plus targeted
grep passes; full solution builds clean, append-only guard tests pass.

src/ZB.MOM.WW.ScadaBridge.Security/SecurityOptions.cs

@@ -16,7 +16,7 @@ namespace ZB.MOM.WW.ScadaBridge.Security;
 /// HttpOnly/Secure and managed entirely by ASP.NET Core cookie authentication.
 /// </para>
 /// <para>
-/// Task 1.2/1.4 cutover: the LDAP connection settings that used to live here as
+/// The LDAP connection settings that used to live here as
 /// flat <c>Ldap*</c> keys (server, port, transport, search base, service account,
 /// attributes, timeout) moved into a nested <c>ScadaBridge:Security:Ldap</c>
 /// sub-section bound to the shared <c>ZB.MOM.WW.Auth.Abstractions.Ldap.LdapOptions</c>
@@ -60,7 +60,7 @@ public class SecurityOptions
     public int JwtRefreshThresholdMinutes { get; set; } = 5;
 
     /// <summary>
-    /// M2.19 (#15): how long a cookie session's role-mapping projection may be stale
+    /// How long a cookie session's role-mapping projection may be stale
     /// before <c>OnValidatePrincipal</c> re-runs the DB-backed <c>RoleMapper</c> on the
     /// session's stored LDAP group claims and rebuilds the role/scope claims. Default:
     /// <b>15 minutes</b>, matching the documented sliding-refresh cadence.
@@ -107,7 +107,7 @@ public class SecurityOptions
 }
 
 /// <summary>
-/// M2.19 (#15): startup validator for <see cref="SecurityOptions"/>. Fails fast at boot
+/// Startup validator for <see cref="SecurityOptions"/>. Fails fast at boot
 /// on any configuration that would defeat idle-timeout enforcement.
 /// </summary>
 /// <remarks>