docs(xmldoc): fill missing XML docs + strip tracking-ID comments across src

Adds <summary>/<param>/<returns>/<inheritdoc> where missing and removes
project bookkeeping IDs (task/tracking refs) from shipped code comments,
so the docs read cleanly and CommentChecker is quiet except for known
false positives (PLC/protocol terms, event/IEqualityComparer inheritdoc).
Doc/comment-only; no logic changed; solution builds clean.

src/Core/ZB.MOM.WW.OtOpcUa.Configuration/Services/ILdapGroupRoleMappingService.cs

@@ -6,7 +6,7 @@ namespace ZB.MOM.WW.OtOpcUa.Configuration.Services;
 /// <summary>
 ///     CRUD surface for <see cref="LdapGroupRoleMapping"/> — the control-plane mapping from
 ///     LDAP groups to Admin UI roles. Consumed only by Admin UI code paths; the OPC UA
-///     data-path evaluator MUST NOT depend on this interface (see decision #150 and the
+///     data-path evaluator MUST NOT depend on this interface (see the
 ///     Phase 6.2 compliance check on control/data-plane separation).
 /// </summary>
 /// <remarks>
@@ -28,11 +28,13 @@ public interface ILdapGroupRoleMappingService
     /// </remarks>
     /// <param name="ldapGroups">The LDAP groups to search for.</param>
     /// <param name="cancellationToken">The cancellation token.</param>
+    /// <returns>The mappings whose LDAP group matches one of <paramref name="ldapGroups"/>.</returns>
     Task<IReadOnlyList<LdapGroupRoleMapping>> GetByGroupsAsync(
         IEnumerable<string> ldapGroups, CancellationToken cancellationToken);
 
     /// <summary>Enumerate every mapping; Admin UI listing only.</summary>
     /// <param name="cancellationToken">The cancellation token.</param>
+    /// <returns>Every LDAP group role mapping.</returns>
     Task<IReadOnlyList<LdapGroupRoleMapping>> ListAllAsync(CancellationToken cancellationToken);
 
     /// <summary>Create a new grant.</summary>
@@ -43,11 +45,13 @@ public interface ILdapGroupRoleMappingService
     /// </exception>
     /// <param name="row">The LDAP group role mapping to create.</param>
     /// <param name="cancellationToken">The cancellation token.</param>
+    /// <returns>The created mapping row.</returns>
     Task<LdapGroupRoleMapping> CreateAsync(LdapGroupRoleMapping row, CancellationToken cancellationToken);
 
     /// <summary>Delete a mapping by its surrogate key.</summary>
     /// <param name="id">The unique identifier of the mapping to delete.</param>
     /// <param name="cancellationToken">The cancellation token.</param>
+    /// <returns>A task that represents the asynchronous operation.</returns>
     Task DeleteAsync(Guid id, CancellationToken cancellationToken);
 }
 

src/Core/ZB.MOM.WW.OtOpcUa.Configuration/Services/LdapGroupRoleMappingService.cs

@@ -10,10 +10,7 @@ namespace ZB.MOM.WW.OtOpcUa.Configuration.Services;
 /// </summary>
 public sealed class LdapGroupRoleMappingService(OtOpcUaConfigDbContext db) : ILdapGroupRoleMappingService
 {
-    /// <summary>Gets LDAP group role mappings for the specified groups.</summary>
-    /// <param name="ldapGroups">The LDAP group names to query.</param>
-    /// <param name="cancellationToken">The cancellation token.</param>
-    /// <returns>The matching role mappings.</returns>
+    /// <inheritdoc />
     public async Task<IReadOnlyList<LdapGroupRoleMapping>> GetByGroupsAsync(
         IEnumerable<string> ldapGroups, CancellationToken cancellationToken)
     {
@@ -28,9 +25,7 @@ public sealed class LdapGroupRoleMappingService(OtOpcUaConfigDbContext db) : ILd
             .ConfigureAwait(false);
     }
 
-    /// <summary>Lists all LDAP group role mappings.</summary>
-    /// <param name="cancellationToken">The cancellation token.</param>
-    /// <returns>All role mappings ordered by group and cluster ID.</returns>
+    /// <inheritdoc />
     public async Task<IReadOnlyList<LdapGroupRoleMapping>> ListAllAsync(CancellationToken cancellationToken)
         => await db.LdapGroupRoleMappings
             .AsNoTracking()
@@ -39,10 +34,7 @@ public sealed class LdapGroupRoleMappingService(OtOpcUaConfigDbContext db) : ILd
             .ToListAsync(cancellationToken)
             .ConfigureAwait(false);
 
-    /// <summary>Creates a new LDAP group role mapping.</summary>
-    /// <param name="row">The mapping to create.</param>
-    /// <param name="cancellationToken">The cancellation token.</param>
-    /// <returns>The created mapping with generated ID and timestamp.</returns>
+    /// <inheritdoc />
     public async Task<LdapGroupRoleMapping> CreateAsync(LdapGroupRoleMapping row, CancellationToken cancellationToken)
     {
         ArgumentNullException.ThrowIfNull(row);
@@ -56,10 +48,7 @@ public sealed class LdapGroupRoleMappingService(OtOpcUaConfigDbContext db) : ILd
         return row;
     }
 
-    /// <summary>Deletes an LDAP group role mapping.</summary>
-    /// <param name="id">The mapping identifier.</param>
-    /// <param name="cancellationToken">The cancellation token.</param>
-    /// <returns>A task that completes when the deletion is done.</returns>
+    /// <inheritdoc />
     public async Task DeleteAsync(Guid id, CancellationToken cancellationToken)
     {
         var existing = await db.LdapGroupRoleMappings.FindAsync([id], cancellationToken).ConfigureAwait(false);