docs: backfill XML documentation across 756 files

Adds <summary>, <param>, <typeparam>, and <inheritdoc/> tags to public
members surfaced by commentchecker — resolves 5,847 of 5,869 issues
(99.6%) across three /fixdocs passes.

src/Core/ZB.MOM.WW.OtOpcUa.Configuration/Services/ILdapGroupRoleMappingService.cs

@@ -22,10 +22,13 @@ public interface ILdapGroupRoleMappingService
     ///     Hot path — fires on every sign-in. The default EF implementation relies on the
     ///     <c>IX_LdapGroupRoleMapping_Group</c> index. Case-insensitive per LDAP conventions.
     /// </remarks>
+    /// <param name="ldapGroups">The LDAP groups to search for.</param>
+    /// <param name="cancellationToken">The cancellation token.</param>
     Task<IReadOnlyList<LdapGroupRoleMapping>> GetByGroupsAsync(
         IEnumerable<string> ldapGroups, CancellationToken cancellationToken);
 
     /// <summary>Enumerate every mapping; Admin UI listing only.</summary>
+    /// <param name="cancellationToken">The cancellation token.</param>
     Task<IReadOnlyList<LdapGroupRoleMapping>> ListAllAsync(CancellationToken cancellationToken);
 
     /// <summary>Create a new grant.</summary>
@@ -34,14 +37,20 @@ public interface ILdapGroupRoleMappingService
     ///     ClusterId, duplicate (group, cluster) pair, etc.) — ValidatedLdapGroupRoleMappingService
     ///     is the write surface that enforces these; the raw service here surfaces DB-level violations.
     /// </exception>
+    /// <param name="row">The LDAP group role mapping to create.</param>
+    /// <param name="cancellationToken">The cancellation token.</param>
     Task<LdapGroupRoleMapping> CreateAsync(LdapGroupRoleMapping row, CancellationToken cancellationToken);
 
     /// <summary>Delete a mapping by its surrogate key.</summary>
+    /// <param name="id">The unique identifier of the mapping to delete.</param>
+    /// <param name="cancellationToken">The cancellation token.</param>
     Task DeleteAsync(Guid id, CancellationToken cancellationToken);
 }
 
 /// <summary>Thrown when <see cref="LdapGroupRoleMapping"/> authoring violates an invariant.</summary>
 public sealed class InvalidLdapGroupRoleMappingException : Exception
 {
+    /// <summary>Initializes a new instance of the InvalidLdapGroupRoleMappingException.</summary>
+    /// <param name="message">The error message.</param>
     public InvalidLdapGroupRoleMappingException(string message) : base(message) { }
 }

src/Core/ZB.MOM.WW.OtOpcUa.Configuration/Services/LdapGroupRoleMappingService.cs

@@ -10,6 +10,10 @@ namespace ZB.MOM.WW.OtOpcUa.Configuration.Services;
 /// </summary>
 public sealed class LdapGroupRoleMappingService(OtOpcUaConfigDbContext db) : ILdapGroupRoleMappingService
 {
+    /// <summary>Gets LDAP group role mappings for the specified groups.</summary>
+    /// <param name="ldapGroups">The LDAP group names to query.</param>
+    /// <param name="cancellationToken">The cancellation token.</param>
+    /// <returns>The matching role mappings.</returns>
     public async Task<IReadOnlyList<LdapGroupRoleMapping>> GetByGroupsAsync(
         IEnumerable<string> ldapGroups, CancellationToken cancellationToken)
     {
@@ -24,6 +28,9 @@ public sealed class LdapGroupRoleMappingService(OtOpcUaConfigDbContext db) : ILd
             .ConfigureAwait(false);
     }
 
+    /// <summary>Lists all LDAP group role mappings.</summary>
+    /// <param name="cancellationToken">The cancellation token.</param>
+    /// <returns>All role mappings ordered by group and cluster ID.</returns>
     public async Task<IReadOnlyList<LdapGroupRoleMapping>> ListAllAsync(CancellationToken cancellationToken)
         => await db.LdapGroupRoleMappings
             .AsNoTracking()
@@ -32,6 +39,10 @@ public sealed class LdapGroupRoleMappingService(OtOpcUaConfigDbContext db) : ILd
             .ToListAsync(cancellationToken)
             .ConfigureAwait(false);
 
+    /// <summary>Creates a new LDAP group role mapping.</summary>
+    /// <param name="row">The mapping to create.</param>
+    /// <param name="cancellationToken">The cancellation token.</param>
+    /// <returns>The created mapping with generated ID and timestamp.</returns>
     public async Task<LdapGroupRoleMapping> CreateAsync(LdapGroupRoleMapping row, CancellationToken cancellationToken)
     {
         ArgumentNullException.ThrowIfNull(row);
@@ -45,6 +56,10 @@ public sealed class LdapGroupRoleMappingService(OtOpcUaConfigDbContext db) : ILd
         return row;
     }
 
+    /// <summary>Deletes an LDAP group role mapping.</summary>
+    /// <param name="id">The mapping identifier.</param>
+    /// <param name="cancellationToken">The cancellation token.</param>
+    /// <returns>A task that completes when the deletion is done.</returns>
     public async Task DeleteAsync(Guid id, CancellationToken cancellationToken)
     {
         var existing = await db.LdapGroupRoleMappings.FindAsync([id], cancellationToken).ConfigureAwait(false);