docs(xmldoc): fill missing XML docs + strip tracking-ID comments across src

Adds <summary>/<param>/<returns>/<inheritdoc> where missing and removes
project bookkeeping IDs (task/tracking refs) from shipped code comments,
so the docs read cleanly and CommentChecker is quiet except for known
false positives (PLC/protocol terms, event/IEqualityComparer inheritdoc).
Doc/comment-only; no logic changed; solution builds clean.

src/Server/ZB.MOM.WW.OtOpcUa.Host/Drivers/DriverFactoryBootstrap.cs

@@ -36,6 +36,7 @@ public static class DriverFactoryBootstrap
     ///     <see cref="IDriverFactory"/> from DI when spawning <c>DriverHostActor</c>.
     /// </summary>
     /// <param name="services">The service collection to register driver factories with.</param>
+    /// <returns>The same service collection, for chaining.</returns>
     public static IServiceCollection AddOtOpcUaDriverFactories(this IServiceCollection services)
     {
         services.AddSingleton<DriverFactoryRegistry>(sp =>
@@ -73,6 +74,7 @@ public static class DriverFactoryBootstrap
     ///     </para>
     /// </summary>
     /// <param name="services">The service collection to register driver probes with.</param>
+    /// <returns>The same service collection, for chaining.</returns>
     public static IServiceCollection AddOtOpcUaDriverProbes(this IServiceCollection services)
     {
         services.TryAddEnumerable(ServiceDescriptor.Singleton<IDriverProbe, ModbusProbe>());

src/Server/ZB.MOM.WW.OtOpcUa.Host/Engines/RoslynVirtualTagEvaluator.cs

@@ -43,11 +43,7 @@ public sealed class RoslynVirtualTagEvaluator : IVirtualTagEvaluator, IDisposabl
         _runTimeout = runTimeout ?? TimeSpan.FromSeconds(2);
     }
 
-    /// <summary>Evaluates a virtual tag expression against a set of dependencies.</summary>
-    /// <param name="virtualTagId">The virtual tag identifier, used for logging.</param>
-    /// <param name="expression">The C# expression to evaluate.</param>
-    /// <param name="dependencies">Dictionary of tag names to values available in the expression context.</param>
-    /// <returns>The evaluation result, either successful with a value or failed with an error message.</returns>
+    /// <inheritdoc />
     public VirtualTagEvalResult Evaluate(string virtualTagId, string expression, IReadOnlyDictionary<string, object?> dependencies)
     {
         if (_disposed) return VirtualTagEvalResult.Failure("evaluator disposed");

src/Server/ZB.MOM.WW.OtOpcUa.Host/Health/HealthEndpoints.cs

@@ -14,6 +14,8 @@ public static class HealthEndpoints
     /// Registers the shared ZB.MOM.WW health probes. Tier semantics preserved: configdb + akka on
     /// ready+active; admin-leader on active only.
     /// </summary>
+    /// <param name="services">The service collection to register the health checks on.</param>
+    /// <returns>The same service collection, for chaining.</returns>
     public static IServiceCollection AddOtOpcUaHealth(this IServiceCollection services)
     {
         services.AddHealthChecks()
@@ -40,6 +42,7 @@ public static class HealthEndpoints
 
     /// <summary>Maps the OtOpcUa health check endpoints to the route builder.</summary>
     /// <param name="app">The endpoint route builder.</param>
+    /// <returns>The same endpoint route builder, for chaining.</returns>
     public static IEndpointRouteBuilder MapOtOpcUaHealth(this IEndpointRouteBuilder app)
     {
         app.MapZbHealth();

src/Server/ZB.MOM.WW.OtOpcUa.Host/Observability/ObservabilityExtensions.cs

@@ -21,6 +21,7 @@ public static class ObservabilityExtensions
     /// <c>Otlp</c>; <c>OtOpcUa:Telemetry:OtlpEndpoint</c> sets the OTLP endpoint. With no
     /// config the exporter stays Prometheus (the default).
     /// </param>
+    /// <returns>The service collection, for chaining.</returns>
     public static IServiceCollection AddOtOpcUaObservability(this IServiceCollection services, IConfiguration configuration)
     {
         return services.AddZbTelemetry(o =>
@@ -44,6 +45,7 @@ public static class ObservabilityExtensions
     /// <c>MapZbHealth</c>, which also marks its endpoints anonymous.
     /// </summary>
     /// <param name="app">The endpoint route builder.</param>
+    /// <returns>The endpoint route builder, for chaining.</returns>
     public static IEndpointRouteBuilder MapOtOpcUaMetrics(this IEndpointRouteBuilder app)
     {
         app.MapZbMetrics().AllowAnonymous();

src/Server/ZB.MOM.WW.OtOpcUa.Host/OpcUa/LdapOpcUaUserAuthenticator.cs

@@ -26,10 +26,7 @@ public sealed class LdapOpcUaUserAuthenticator(
     ILogger<LdapOpcUaUserAuthenticator> logger)
     : IOpcUaUserAuthenticator
 {
-    /// <summary>Authenticates an OPC UA UserName token via LDAP, resolving roles through the mapper.</summary>
-    /// <param name="username">The username to authenticate.</param>
-    /// <param name="password">The password to authenticate.</param>
-    /// <param name="ct">Cancellation token.</param>
+    /// <inheritdoc />
     public async Task<OpcUaUserAuthResult> AuthenticateUserNameAsync(string username, string password, CancellationToken ct)
     {
         try

src/Server/ZB.MOM.WW.OtOpcUa.Host/OpcUa/OtOpcUaServerHostedService.cs

@@ -98,6 +98,7 @@ public sealed class OtOpcUaServerHostedService : IHostedService, IAsyncDisposabl
     /// Starts the OPC UA server asynchronously.
     /// </summary>
     /// <param name="cancellationToken">Cancellation token.</param>
+    /// <returns>A task that represents the asynchronous operation.</returns>
     public async Task StartAsync(CancellationToken cancellationToken)
     {
         _server = new OtOpcUaSdkServer();
@@ -236,6 +237,7 @@ public sealed class OtOpcUaServerHostedService : IHostedService, IAsyncDisposabl
     /// Stops the OPC UA server asynchronously.
     /// </summary>
     /// <param name="cancellationToken">Cancellation token.</param>
+    /// <returns>A task that represents the asynchronous operation.</returns>
     public Task StopAsync(CancellationToken cancellationToken)
     {
         // Revert to Null adapters so any in-flight writes from a poison-pilled actor don't hit a
@@ -254,6 +256,7 @@ public sealed class OtOpcUaServerHostedService : IHostedService, IAsyncDisposabl
     /// <summary>
     /// Disposes the hosted service and its resources asynchronously.
     /// </summary>
+    /// <returns>A task that represents the asynchronous operation.</returns>
     public async ValueTask DisposeAsync()
     {
         if (_appHost is not null) await _appHost.DisposeAsync();

src/Server/ZB.MOM.WW.OtOpcUa.Host/Program.cs

@@ -88,7 +88,7 @@ Directory.SetCurrentDirectory(AppContext.BaseDirectory);
 builder.AddZbSerilog(o => o.ServiceName = "otopcua");
 
 // Windows-service registration is handled at install time by scripts/install/Install-Services.ps1
-// (Task 62) rather than in-process, so the binary stays cross-platform-compilable.
+// rather than in-process, so the binary stays cross-platform-compilable.
 
 // Shared services — always registered regardless of role. ConfigDb is required for everything.
 builder.Services.AddOtOpcUaConfigDb(builder.Configuration);
@@ -222,8 +222,8 @@ if (hasDriver)
 
     // Script-log fan-out (Layer 0). The DPS publisher resolves the ActorSystem lazily so it never
     // races Akka startup. ScriptRootLogger wraps the composed pipeline (rolling scripts-*.log +
-    // error mirror to the main log + script-logs DPS topic) for unambiguous DI resolution; Task 3
-    // injects it into the Roslyn evaluators above.
+    // error mirror to the main log + script-logs DPS topic) for unambiguous DI resolution; it
+    // injects into the Roslyn evaluators above.
     var scriptLogFilePath = builder.Configuration["Scripting:LogFilePath"] ?? "logs/scripts-.log";
     var scriptLogTopicMinLevel = Enum.TryParse<LogEventLevel>(
         builder.Configuration["Scripting:LogTopicMinLevel"], ignoreCase: true, out var parsedLevel)