docs+ui: backfill XML doc comments and finish dashboard layout pass

Adds missing <summary>/<param> XML docs across 99 server, worker, and test
files so CommentChecker reports zero issues (TreatWarningsAsErrors needs the
analyzer clean). Bundles in WIP dashboard work: NavSection extraction,
MainLayout/site.css/js styling alignment, and DashboardOptions/Auth tweaks.

src/ZB.MOM.WW.MxGateway.Server/Grpc/MxAccessGatewayService.cs

@@ -690,9 +690,13 @@ public sealed class MxAccessGatewayService(
         bool HasAllowedItems)
     {
         /// <summary>Builds a reply containing only the denied entries (used when no items survived filtering).</summary>
+        /// <param name="request">The original command request.</param>
+        /// <returns>A reply with denied results only.</returns>
         public abstract MxCommandReply CreateDeniedReply(MxCommandRequest request);
 
         /// <summary>Splices denied entries back into the worker's allowed-only reply in original-index order.</summary>
+        /// <param name="reply">The worker's reply containing only allowed results.</param>
+        /// <returns>A merged reply in the original order.</returns>
         public abstract MxCommandReply MergeDeniedInto(MxCommandReply reply);
     }
 
@@ -703,6 +707,7 @@ public sealed class MxAccessGatewayService(
         bool HasAllowedItems)
         : BulkConstraintPlan(Command, OriginalCount, HasAllowedItems)
     {
+        /// <inheritdoc />
         public override MxCommandReply CreateDeniedReply(MxCommandRequest request)
         {
             MxCommandReply reply = new()
@@ -716,6 +721,7 @@ public sealed class MxAccessGatewayService(
             return reply;
         }
 
+        /// <inheritdoc />
         public override MxCommandReply MergeDeniedInto(MxCommandReply reply)
         {
             BulkSubscribeReply allowed = GetPayload(reply) ?? new BulkSubscribeReply();
@@ -774,6 +780,7 @@ public sealed class MxAccessGatewayService(
         bool HasAllowedItems)
         : BulkConstraintPlan(Command, OriginalCount, HasAllowedItems)
     {
+        /// <inheritdoc />
         public override MxCommandReply CreateDeniedReply(MxCommandRequest request)
         {
             MxCommandReply reply = new()
@@ -787,6 +794,7 @@ public sealed class MxAccessGatewayService(
             return reply;
         }
 
+        /// <inheritdoc />
         public override MxCommandReply MergeDeniedInto(MxCommandReply reply)
         {
             BulkWriteReply allowed = GetPayload(reply) ?? new BulkWriteReply();
@@ -849,6 +857,7 @@ public sealed class MxAccessGatewayService(
         bool HasAllowedItems)
         : BulkConstraintPlan(Command, OriginalCount, HasAllowedItems)
     {
+        /// <inheritdoc />
         public override MxCommandReply CreateDeniedReply(MxCommandRequest request)
         {
             MxCommandReply reply = new()
@@ -862,6 +871,7 @@ public sealed class MxAccessGatewayService(
             return reply;
         }
 
+        /// <inheritdoc />
         public override MxCommandReply MergeDeniedInto(MxCommandReply reply)
         {
             BulkReadReply allowed = reply.ReadBulk ?? new BulkReadReply();