docs: strip task-tracking IDs from code comments and fill missing XML docs

Tracking IDs are review bookkeeping that rots in shipped source; the rationale they tagged is kept. Comment-only change (CommentChecker 458 -> 16 false positives).

clients/dotnet/ZB.MOM.WW.MxGateway.Client.Tests/MxGatewayClientCliTests.cs

@@ -134,6 +134,7 @@ public sealed class MxGatewayClientCliTests
     }
 
     /// <summary>Verifies that write-secured builds a WriteSecured command with the value and user ids.</summary>
+    /// <returns>A task that represents the asynchronous operation.</returns>
     [Fact]
     public async Task RunAsync_WriteSecured_BuildsWriteSecuredCommand()
     {
@@ -178,6 +179,7 @@ public sealed class MxGatewayClientCliTests
     /// Verifies that authenticate-user builds an AuthenticateUser command sourcing the
     /// credential from the flag, and that the credential never appears in stdout/stderr.
     /// </summary>
+    /// <returns>A task that represents the asynchronous operation.</returns>
     [Fact]
     public async Task RunAsync_AuthenticateUser_BuildsCommandAndDoesNotEchoCredential()
     {
@@ -218,9 +220,10 @@ public sealed class MxGatewayClientCliTests
     }
 
     /// <summary>
-    /// CLI-04: a surfaced error for authenticate-user must have the credential
+    /// Verifies that a surfaced error for authenticate-user must have the credential
     /// redacted (never echoed to stderr), mirroring the API-key redaction seam.
     /// </summary>
+    /// <returns>A task that represents the asynchronous operation.</returns>
     [Fact]
     public async Task RunAsync_AuthenticateUser_ErrorOutput_RedactsCredential()
     {
@@ -248,7 +251,7 @@ public sealed class MxGatewayClientCliTests
     }
 
     /// <summary>
-    /// CLI-45: <c>--password</c> is the primary credential flag, matching the other
+    /// <c>--password</c> is the primary credential flag, matching the other
     /// four CLIs. The credential reaches the wire but never stdout/stderr.
     /// </summary>
     /// <returns>A task that represents the asynchronous operation.</returns>
@@ -290,10 +293,12 @@ public sealed class MxGatewayClientCliTests
     }
 
     /// <summary>
-    /// CLI-45: the credential is read from the environment variable named by
+    /// the credential is read from the environment variable named by
     /// <c>--password-env</c>, whose default is the canonical
     /// <c>MXGATEWAY_VERIFY_PASSWORD</c> shared by all five CLIs.
     /// </summary>
+    /// <param name="passwordEnvArgument">The value passed to <c>--password-env</c>, or null to use the default.</param>
+    /// <param name="environmentName">The environment variable that holds the credential.</param>
     /// <returns>A task that represents the asynchronous operation.</returns>
     [Theory]
     [InlineData(null, "MXGATEWAY_VERIFY_PASSWORD")]
@@ -340,7 +345,7 @@ public sealed class MxGatewayClientCliTests
     }
 
     /// <summary>
-    /// CLI-45: the pre-rename names stay usable for one release — the deprecated
+    /// the pre-rename names stay usable for one release — the deprecated
     /// <c>--verify-user-password</c> flag and the deprecated
     /// <c>MXGATEWAY_VERIFY_USER_PASSWORD</c> environment variable both still resolve.
     /// </summary>
@@ -413,7 +418,7 @@ public sealed class MxGatewayClientCliTests
     }
 
     /// <summary>
-    /// CLI-45: a missing or empty credential fails fast before the invoke — the CLI
+    /// a missing or empty credential fails fast before the invoke — the CLI
     /// never sends a fabricated empty password to the wire. The error names the flag
     /// and the environment variable, never a value.
     /// </summary>
@@ -463,6 +468,9 @@ public sealed class MxGatewayClientCliTests
         private readonly string _name;
         private readonly string? _original;
 
+        /// <summary>Sets the environment variable and remembers its original value.</summary>
+        /// <param name="name">The environment variable name.</param>
+        /// <param name="value">The temporary value, or null to clear it.</param>
         public EnvironmentVariableScope(string name, string? value)
         {
             _name = name;
@@ -470,6 +478,7 @@ public sealed class MxGatewayClientCliTests
             Environment.SetEnvironmentVariable(name, value);
         }
 
+        /// <summary>Restores the original environment variable value.</summary>
         public void Dispose()
         {
             Environment.SetEnvironmentVariable(_name, _original);
@@ -588,7 +597,7 @@ public sealed class MxGatewayClientCliTests
 
     /// <summary>
     ///     Verifies stream-events renders the ReplayGap sentinel as the typed cross-CLI row —
-    ///     numeric cursors under a replayGap key — instead of the raw sentinel MxEvent (NEXT-02).
+    ///     numeric cursors under a replayGap key — instead of the raw sentinel MxEvent.
     /// </summary>
     /// <returns>A task that represents the asynchronous operation.</returns>
     [Fact]