docs: strip task-tracking IDs from code comments and fill missing XML docs

Tracking IDs are review bookkeeping that rots in shipped source; the rationale they tagged is kept. Comment-only change (CommentChecker 458 -> 16 false positives).

src/ZB.MOM.WW.MxGateway.Tests/Dashboard/SecretsNavRenderTests.cs

@@ -15,7 +15,7 @@ namespace ZB.MOM.WW.MxGateway.Tests.Dashboard;
 
 /// <summary>
 /// Renders <see cref="MainLayout"/> and asserts which policy-gated links the side rail emits —
-/// Secrets (<c>secrets:manage</c>) and, since SEC-40, Alarms
+/// Secrets (<c>secrets:manage</c>) and Alarms
 /// (<see cref="DashboardAuthenticationDefaults.AlarmsPolicy"/>).
 /// </summary>
 /// <remarks>
@@ -100,7 +100,7 @@ public sealed class SecretsNavRenderTests
     }
 
     /// <summary>
-    /// SEC-40's nav half: an anonymous caller — the read-only localhost path — is not offered the
+    /// The nav half: an anonymous caller — the read-only localhost path — is not offered the
     /// Alarms link, because the page and hub now refuse them. Same reasoning as the Secrets
     /// negative above: this is the assertion that distinguishes a gate from an inert one.
     /// </summary>
@@ -114,7 +114,7 @@ public sealed class SecretsNavRenderTests
     }
 
     /// <summary>
-    /// The control for that negative: an authenticated Viewer still gets the Alarms link. SEC-40
+    /// The control for that negative: an authenticated Viewer still gets the Alarms link. The Alarms gate
     /// excludes the environment bypasses, not Viewers — alarm metadata stays galaxy-wide for a
     /// real dashboard role because the central monitor carries no per-session provenance.
     /// </summary>
@@ -135,7 +135,7 @@ public sealed class SecretsNavRenderTests
         {
             options.AddSecretsAuthorization();
             // The rail's Alarms AuthorizeView resolves this by name; an unregistered policy throws
-            // rather than denying, so it must be present for any rail render (SEC-40).
+            // rather than denying, so it must be present for any rail render.
             options.AddPolicy(
                 DashboardAuthenticationDefaults.AlarmsPolicy,
                 policy => policy.AddRequirements(AuthenticatedDashboardRoleRequirement.AnyDashboardRole));
@@ -163,6 +163,7 @@ public sealed class SecretsNavRenderTests
     // vacuously.
     private sealed class StubAuthenticationStateProvider(string[] roles) : AuthenticationStateProvider
     {
+        /// <inheritdoc />
         public override Task<AuthenticationState> GetAuthenticationStateAsync()
         {
             ClaimsIdentity identity = roles.Length == 0
@@ -181,6 +182,7 @@ public sealed class SecretsNavRenderTests
     // under static rendering.
     private sealed class StubNavigationManager : NavigationManager
     {
+        /// <summary>Initializes the stub with a fixed localhost base URI.</summary>
         public StubNavigationManager() => Initialize("https://localhost/", "https://localhost/");
     }
 }