docs+ui: backfill XML doc comments and finish dashboard layout pass

Adds missing <summary>/<param> XML docs across 99 server, worker, and test
files so CommentChecker reports zero issues (TreatWarningsAsErrors needs the
analyzer clean). Bundles in WIP dashboard work: NavSection extraction,
MainLayout/site.css/js styling alignment, and DashboardOptions/Auth tweaks.

src/ZB.MOM.WW.MxGateway.IntegrationTests/DashboardLdapLiveTests.cs

@@ -10,6 +10,7 @@ namespace ZB.MOM.WW.MxGateway.IntegrationTests;
 [Trait("Category", "LiveLdap")]
 public sealed class DashboardLdapLiveTests
 {
+    /// <summary>Verifies that an admin user in the GwAdmin group authenticates successfully.</summary>
     [LiveLdapFact]
     public async Task AuthenticateAsync_AdminInGwAdminGroup_Succeeds()
     {
@@ -38,6 +39,7 @@ public sealed class DashboardLdapLiveTests
             && claim.Value == DashboardRoles.Admin);
     }
 
+    /// <summary>Verifies that a readonly user without GwAdmin group fails to authenticate.</summary>
     [LiveLdapFact]
     public async Task AuthenticateAsync_ReadOnlyUserMissingGwAdminGroup_Fails()
     {
@@ -53,6 +55,7 @@ public sealed class DashboardLdapLiveTests
         Assert.DoesNotContain("readonly123", result.FailureMessage, StringComparison.Ordinal);
     }
 
+    /// <summary>Verifies that authentication with wrong password fails without leaking the password.</summary>
     [LiveLdapFact]
     public async Task AuthenticateAsync_AdminWithWrongPassword_FailsWithoutLeakingPassword()
     {
@@ -71,6 +74,7 @@ public sealed class DashboardLdapLiveTests
         Assert.DoesNotContain(wrongPassword, result.FailureMessage, StringComparison.Ordinal);
     }
 
+    /// <summary>Verifies that authentication with unknown username fails.</summary>
     [LiveLdapFact]
     public async Task AuthenticateAsync_UnknownUsername_Fails()
     {
@@ -87,6 +91,7 @@ public sealed class DashboardLdapLiveTests
         Assert.Null(result.Principal);
     }
 
+    /// <summary>Verifies that authentication fails gracefully when the server is unreachable.</summary>
     [LiveLdapFact]
     public async Task AuthenticateAsync_ServerUnreachable_FailsWithoutThrowing()
     {

src/ZB.MOM.WW.MxGateway.IntegrationTests/LiveLdapFactAttribute.cs

@@ -4,6 +4,7 @@ public sealed class LiveLdapFactAttribute : FactAttribute
 {
     public const string EnableVariableName = "MXGATEWAY_RUN_LIVE_LDAP_TESTS";
 
+    /// <summary>Initializes a live LDAP test fact that skips if LDAP tests are not enabled.</summary>
     public LiveLdapFactAttribute()
     {
         if (!Enabled)
@@ -12,5 +13,6 @@ public sealed class LiveLdapFactAttribute : FactAttribute
         }
     }
 
+    /// <summary>Gets a value indicating whether live LDAP tests are enabled.</summary>
     public static bool Enabled => IntegrationTestEnvironment.IsEnabled(EnableVariableName);
 }

src/ZB.MOM.WW.MxGateway.IntegrationTests/WorkerLiveMxAccessSmokeTests.cs

@@ -1112,6 +1112,8 @@ public sealed class WorkerLiveMxAccessSmokeTests(ITestOutputHelper output)
         /// transitions it to Faulted, which the public gRPC API only exposes indirectly via
         /// CloseSession's reply (and not before a graceful close completes).
         /// </summary>
+        /// <param name="sessionId">The session identifier.</param>
+        /// <param name="session">The session if found; otherwise null.</param>
         public bool TryGetSession(string sessionId, [MaybeNullWhen(false)] out GatewaySession session)
         {
             return _registry.TryGet(sessionId, out session);
@@ -1534,6 +1536,7 @@ public sealed class WorkerLiveMxAccessSmokeTests(ITestOutputHelper output)
         private readonly StringBuilder buffer = new();
         private readonly object syncRoot = new();
 
+        /// <summary>Gets the accumulated output buffer contents.</summary>
         public string Captured
         {
             get
@@ -1545,6 +1548,8 @@ public sealed class WorkerLiveMxAccessSmokeTests(ITestOutputHelper output)
             }
         }
 
+        /// <summary>Writes a line of text to the buffer and inner helper.</summary>
+        /// <param name="message">The message to write.</param>
         public void WriteLine(string message)
         {
             lock (syncRoot)
@@ -1555,6 +1560,9 @@ public sealed class WorkerLiveMxAccessSmokeTests(ITestOutputHelper output)
             inner.WriteLine(message);
         }
 
+        /// <summary>Writes a formatted line of text to the buffer and inner helper.</summary>
+        /// <param name="format">The message format string.</param>
+        /// <param name="args">The format arguments.</param>
         public void WriteLine(string format, params object[] args)
         {
             string formatted = string.Format(System.Globalization.CultureInfo.InvariantCulture, format, args);
@@ -1569,11 +1577,13 @@ public sealed class WorkerLiveMxAccessSmokeTests(ITestOutputHelper output)
 
     private sealed class AllowAllConstraintEnforcer : IConstraintEnforcer
     {
+        /// <inheritdoc />
         public Task<ConstraintFailure?> CheckReadTagAsync(
             ApiKeyIdentity? identity,
             string tagAddress,
             CancellationToken cancellationToken) => Task.FromResult<ConstraintFailure?>(null);
 
+        /// <inheritdoc />
         public Task<ConstraintFailure?> CheckReadHandleAsync(
             ApiKeyIdentity? identity,
             GatewaySession session,
@@ -1581,6 +1591,7 @@ public sealed class WorkerLiveMxAccessSmokeTests(ITestOutputHelper output)
             int itemHandle,
             CancellationToken cancellationToken) => Task.FromResult<ConstraintFailure?>(null);
 
+        /// <inheritdoc />
         public Task<ConstraintFailure?> CheckWriteHandleAsync(
             ApiKeyIdentity? identity,
             GatewaySession session,
@@ -1588,6 +1599,7 @@ public sealed class WorkerLiveMxAccessSmokeTests(ITestOutputHelper output)
             int itemHandle,
             CancellationToken cancellationToken) => Task.FromResult<ConstraintFailure?>(null);
 
+        /// <inheritdoc />
         public Task RecordDenialAsync(
             ApiKeyIdentity? identity,
             string commandKind,