docs(auth): #543 add the one-public-ctor remarks paragraph to the two newly-pinned interceptors

ConfigServeAuthInterceptor and LocalDbSyncAuthInterceptor gained HasExactlyOnePublicConstructor
pin tests in this branch but lacked the sibling-standard <remarks> paragraph naming them
(TelemetryStream/MeshCommand/CentralCommand all carry it). Cosmetic consistency item from the
#543 code review.

Claude-Session: https://claude.ai/code/session_014WNM4vjoVksyyBraTXSZE1

src/Server/ZB.MOM.WW.OtOpcUa.Host/Configuration/ConfigServeAuthInterceptor.cs

@@ -33,6 +33,11 @@ namespace ZB.MOM.WW.OtOpcUa.Host.Configuration;
 ///         wrong key cannot be recovered byte-by-byte from response timing. Length differences are
 ///         unavoidably observable and are not sensitive.
 ///     </para>
+///     <para>
+///         <b>Exactly one public constructor.</b> <c>Grpc.AspNetCore</c> silently stops invoking an
+///         interceptor that has more than one public ctor — see
+///         <c>ConfigServeAuthInterceptorTests.HasExactlyOnePublicConstructor</c>.
+///     </para>
 /// </remarks>
 public sealed class ConfigServeAuthInterceptor : Interceptor
 {

src/Server/ZB.MOM.WW.OtOpcUa.Host/Configuration/LocalDbSyncAuthInterceptor.cs

@@ -38,6 +38,11 @@ namespace ZB.MOM.WW.OtOpcUa.Host.Configuration;
 ///         a wrong key cannot be recovered byte-by-byte from response timing. Length differences are
 ///         unavoidably observable and are not sensitive.
 ///     </para>
+///     <para>
+///         <b>Exactly one public constructor.</b> <c>Grpc.AspNetCore</c> silently stops invoking an
+///         interceptor that has more than one public ctor — see
+///         <c>LocalDbSyncAuthInterceptorTests.HasExactlyOnePublicConstructor</c>.
+///     </para>
 /// </remarks>
 public sealed class LocalDbSyncAuthInterceptor : Interceptor
 {