review(Core): re-review at HEAD; clean up duplicate/unexplained doc comments

Re-review at 7286d320. Core-013 (duplicate <summary> on HostBoundHandle), Core-014
(clarify EquipmentNodeWalker test-only hardcoded attrs). Both Low, doc-only. Prior
authz/Galaxy churn verified correct.

src/Core/ZB.MOM.WW.OtOpcUa.Core/OpcUa/EquipmentNodeWalker.cs

@@ -157,6 +157,12 @@ public static class EquipmentNodeWalker
     /// </summary>
     private static void AddTagVariable(IAddressSpaceBuilder equipmentBuilder, Tag tag)
     {
+        // SecurityClass and IsHistorized are intentionally not extracted from TagConfig here.
+        // In production, EquipmentNodeWalker.Walk is superseded by the
+        // AddressSpaceComposer → AddressSpaceApplier → Sink → NodeManager chain, which reads
+        // both fields from TagConfig JSON directly (via DeploymentArtifact.ExtractTagHistorize
+        // and the SecurityClassification column). This walker is retained for unit-test support
+        // only; real server deployments never invoke Walk to build live nodes.
         var attr = new DriverAttributeInfo(
             FullName: ExtractFullName(tag.TagConfig),
             DriverDataType: ParseDriverDataType(tag.DataType),

src/Core/ZB.MOM.WW.OtOpcUa.Core/Resilience/AlarmSurfaceInvoker.cs

@@ -150,11 +150,6 @@ public sealed class AlarmSurfaceInvoker
         return result;
     }
 
-    /// <summary>
-    ///     Wraps an <see cref="IAlarmSubscriptionHandle"/> returned by the driver with the
-    ///     resolved host name used when the subscription was created. <see cref="UnsubscribeAsync"/>
-    ///     unwraps this to route the unsubscribe through the same host's resilience pipeline.
-    /// </summary>
     /// <summary>
     ///     Wraps an <see cref="IAlarmSubscriptionHandle"/> returned by the driver with the
     ///     resolved host name used when the subscription was created. <see cref="UnsubscribeAsync"/>