docs: backfill XML documentation across 756 files

Adds <summary>, <param>, <typeparam>, and <inheritdoc/> tags to public
members surfaced by commentchecker — resolves 5,847 of 5,869 issues
(99.6%) across three /fixdocs passes.

src/Core/ZB.MOM.WW.OtOpcUa.Configuration/Services/ILdapGroupRoleMappingService.cs

@@ -22,10 +22,13 @@ public interface ILdapGroupRoleMappingService
     ///     Hot path — fires on every sign-in. The default EF implementation relies on the
     ///     <c>IX_LdapGroupRoleMapping_Group</c> index. Case-insensitive per LDAP conventions.
     /// </remarks>
+    /// <param name="ldapGroups">The LDAP groups to search for.</param>
+    /// <param name="cancellationToken">The cancellation token.</param>
     Task<IReadOnlyList<LdapGroupRoleMapping>> GetByGroupsAsync(
         IEnumerable<string> ldapGroups, CancellationToken cancellationToken);
 
     /// <summary>Enumerate every mapping; Admin UI listing only.</summary>
+    /// <param name="cancellationToken">The cancellation token.</param>
     Task<IReadOnlyList<LdapGroupRoleMapping>> ListAllAsync(CancellationToken cancellationToken);
 
     /// <summary>Create a new grant.</summary>
@@ -34,14 +37,20 @@ public interface ILdapGroupRoleMappingService
     ///     ClusterId, duplicate (group, cluster) pair, etc.) — ValidatedLdapGroupRoleMappingService
     ///     is the write surface that enforces these; the raw service here surfaces DB-level violations.
     /// </exception>
+    /// <param name="row">The LDAP group role mapping to create.</param>
+    /// <param name="cancellationToken">The cancellation token.</param>
     Task<LdapGroupRoleMapping> CreateAsync(LdapGroupRoleMapping row, CancellationToken cancellationToken);
 
     /// <summary>Delete a mapping by its surrogate key.</summary>
+    /// <param name="id">The unique identifier of the mapping to delete.</param>
+    /// <param name="cancellationToken">The cancellation token.</param>
     Task DeleteAsync(Guid id, CancellationToken cancellationToken);
 }
 
 /// <summary>Thrown when <see cref="LdapGroupRoleMapping"/> authoring violates an invariant.</summary>
 public sealed class InvalidLdapGroupRoleMappingException : Exception
 {
+    /// <summary>Initializes a new instance of the InvalidLdapGroupRoleMappingException.</summary>
+    /// <param name="message">The error message.</param>
     public InvalidLdapGroupRoleMappingException(string message) : base(message) { }
 }