docs+ui: backfill XML doc comments and finish dashboard layout pass

Adds missing <summary>/<param> XML docs across 99 server, worker, and test
files so CommentChecker reports zero issues (TreatWarningsAsErrors needs the
analyzer clean). Bundles in WIP dashboard work: NavSection extraction,
MainLayout/site.css/js styling alignment, and DashboardOptions/Auth tweaks.

src/ZB.MOM.WW.MxGateway.Tests/Security/Authorization/ConstraintEnforcerTests.cs

@@ -10,6 +10,7 @@ namespace ZB.MOM.WW.MxGateway.Tests.Security.Authorization;
 
 public sealed class ConstraintEnforcerTests
 {
+    /// <summary>Verifies that read outside allowed subtree returns failure.</summary>
     [Fact]
     public async Task CheckReadTagAsync_WhenOutsideReadSubtree_ReturnsFailure()
     {
@@ -28,6 +29,7 @@ public sealed class ConstraintEnforcerTests
         Assert.Equal("read_scope", failure.ConstraintName);
     }
 
+    /// <summary>Verifies that write with high classification returns failure and audits.</summary>
     [Fact]
     public async Task CheckWriteHandleAsync_WhenClassificationTooHigh_ReturnsFailureAndAudits()
     {
@@ -70,6 +72,7 @@ public sealed class ConstraintEnforcerTests
         Assert.Contains("max_write_classification", entry.Details, StringComparison.Ordinal);
     }
 
+    /// <summary>Verifies that historized-only constraint requires historized attribute.</summary>
     [Fact]
     public async Task CheckReadTagAsync_WithHistorizedOnly_RequiresRequestedAttributeToBeHistorized()
     {
@@ -88,6 +91,7 @@ public sealed class ConstraintEnforcerTests
         Assert.Equal("read_historized_only", failure.ConstraintName);
     }
 
+    /// <summary>Verifies that alarm-only constraint requires alarm attribute.</summary>
     [Fact]
     public async Task CheckReadTagAsync_WithAlarmOnly_RequiresRequestedAttributeToBeAlarm()
     {
@@ -106,6 +110,7 @@ public sealed class ConstraintEnforcerTests
         Assert.Equal("read_alarm_only", failure.ConstraintName);
     }
 
+    /// <summary>Verifies that attribute-only constraint fails closed for object tag.</summary>
     [Fact]
     public async Task CheckReadTagAsync_WithAttributeOnlyConstraint_FailsClosedForObjectTag()
     {
@@ -222,23 +227,29 @@ public sealed class ConstraintEnforcerTests
 
     private sealed class StubGalaxyHierarchyCache(GalaxyHierarchyCacheEntry current) : IGalaxyHierarchyCache
     {
+        /// <summary>Gets the current cache entry.</summary>
         public GalaxyHierarchyCacheEntry Current { get; } = current;
 
+        /// <inheritdoc />
         public Task RefreshAsync(CancellationToken cancellationToken) => Task.CompletedTask;
 
+        /// <inheritdoc />
         public Task WaitForFirstLoadAsync(CancellationToken cancellationToken) => Task.CompletedTask;
     }
 
     private sealed class FakeAuditStore : IApiKeyAuditStore
     {
+        /// <summary>Gets the recorded audit entries.</summary>
         public List<ApiKeyAuditEntry> Entries { get; } = [];
 
+        /// <inheritdoc />
         public Task AppendAsync(ApiKeyAuditEntry entry, CancellationToken cancellationToken)
         {
             Entries.Add(entry);
             return Task.CompletedTask;
         }
 
+        /// <inheritdoc />
         public Task<IReadOnlyList<ApiKeyAuditRecord>> ListRecentAsync(int count, CancellationToken cancellationToken)
         {
             return Task.FromResult<IReadOnlyList<ApiKeyAuditRecord>>([]);