docs: remove stale SDK 1 peer and calculator descriptions

src/Server/ZB.MOM.WW.OtOpcUa.OpcUaServer/OpcUaApplicationHost.cs

@@ -205,8 +205,8 @@ public sealed class OpcUaApplicationHost : IAsyncDisposable
         if (server is not OtOpcUaSdkServer sdkServer)
             throw new ArgumentException("The server must support application authentication before its listeners open.", nameof(server));
         _server = server;
-        // 1.5.378 requires an ITelemetryContext on the ApplicationInstance ctor (the parameterless ctor
-        // is obsolete). DefaultTelemetry.Create wires the SDK's internal logging; an empty builder keeps
+        // ApplicationInstance receives the host's ITelemetryContext. DefaultTelemetry.Create wires
+        // the SDK's internal logging; an empty builder keeps
         // the SDK's trace off our ILogger (the host keeps its own _logger) — sufficient for the bootstrap.
         _application = new ApplicationInstance(_telemetry)
         {
@@ -363,8 +363,7 @@ public sealed class OpcUaApplicationHost : IAsyncDisposable
         string password;
         try
         {
-            // 1.5.378 exposes DecryptedPassword as raw bytes (was string); UserName token passwords
-            // are UTF-8 on the wire.
+            // The SDK UserName token handler exposes decrypted password bytes; decode the wire UTF-8.
             var decryptedBytes = (args.UserIdentityTokenHandler as UserNameIdentityTokenHandler)?.DecryptedPassword;
             password = decryptedBytes is null ? string.Empty : Encoding.UTF8.GetString(decryptedBytes);
         }

src/Server/ZB.MOM.WW.OtOpcUa.OpcUaServer/Security/IOpcUaUserAuthenticator.cs

@@ -32,7 +32,7 @@ public interface IOpcUaUserAuthenticator
     ///     endpoint and delegates, so an implementation that does not need it is unchanged.
     /// </summary>
     /// <remarks>
-    ///     The endpoint is best effort (<see cref="SecureChannelRemoteEndpoint"/>) and null when unknown — an
+    ///     The endpoint uses the SDK's public transport peer address during activation and is null when unknown — an
     ///     implementation must treat null as "no per-client information", never as a distinct client. Same
     ///     must-not-throw contract as the three-argument overload.
     /// </remarks>