docs: backfill XML documentation across 756 files

Adds <summary>, <param>, <typeparam>, and <inheritdoc/> tags to public
members surfaced by commentchecker — resolves 5,847 of 5,869 issues
(99.6%) across three /fixdocs passes.

src/Server/ZB.MOM.WW.OtOpcUa.Security/Ldap/LdapAuthService.cs

@@ -15,6 +15,10 @@ public sealed class LdapAuthService(IOptions<LdapOptions> options, ILogger<LdapA
 {
     private readonly LdapOptions _options = options.Value;
 
+    /// <summary>Authenticates a user via LDAP bind and retrieves their group memberships and roles.</summary>
+    /// <param name="username">The username to authenticate.</param>
+    /// <param name="password">The password to validate against the LDAP directory.</param>
+    /// <param name="ct">A cancellation token to observe while waiting for the operation to complete.</param>
     public async Task<LdapAuthResult> AuthenticateAsync(string username, string password, CancellationToken ct = default)
     {
         if (string.IsNullOrWhiteSpace(username))
@@ -130,6 +134,9 @@ public sealed class LdapAuthService(IOptions<LdapOptions> options, ILogger<LdapA
             : $"cn={username},{_options.SearchBase}";
     }
 
+    /// <summary>Escapes special characters in an LDAP filter string according to RFC 4515.</summary>
+    /// <param name="input">The unescaped string to escape.</param>
+    /// <returns>The escaped LDAP filter string.</returns>
     internal static string EscapeLdapFilter(string input) =>
         input.Replace("\\", "\\5c")
              .Replace("*", "\\2a")
@@ -142,6 +149,8 @@ public sealed class LdapAuthService(IOptions<LdapOptions> options, ILogger<LdapA
     ///     group as an <c>ou=</c> RDN immediately above the user's <c>cn=</c>, so this recovers
     ///     the group name when <see cref="LdapOptions.GroupAttribute"/> is absent from the entry.
     /// </summary>
+    /// <param name="dn">The distinguished name to extract the OU from.</param>
+    /// <returns>The extracted OU value, or null if no OU segment is found.</returns>
     internal static string? ExtractOuSegment(string dn)
     {
         var segments = dn.Split(',');
@@ -154,6 +163,9 @@ public sealed class LdapAuthService(IOptions<LdapOptions> options, ILogger<LdapA
         return null;
     }
 
+    /// <summary>Extracts the value portion of the first RDN (relative distinguished name) from a DN.</summary>
+    /// <param name="dn">The distinguished name to extract from.</param>
+    /// <returns>The value of the first RDN.</returns>
     internal static string ExtractFirstRdnValue(string dn)
     {
         var equalsIdx = dn.IndexOf('=');