docs: strip task-tracking IDs from code comments and fill missing XML docs

Tracking IDs are review bookkeeping that rots in shipped source; the rationale they tagged is kept. Comment-only change (CommentChecker 458 -> 16 false positives).

src/ZB.MOM.WW.MxGateway.Tests/Gateway/Dashboard/DashboardSessionAclTests.cs

@@ -10,7 +10,7 @@ namespace ZB.MOM.WW.MxGateway.Tests.Gateway.Dashboard;
 
 /// <summary>
 /// Covers <see cref="DashboardSessionAcl"/>, the single decision both dashboard subscribe seams
-/// consult (SEC-25 / TST-15).
+/// consult.
 /// </summary>
 /// <remarks>
 /// Every branch is asserted in its denying direction as well as its allowing one, because the
@@ -77,6 +77,7 @@ public sealed class DashboardSessionAclTests
     }
 
     /// <summary>A blank session id is denied without consulting anything.</summary>
+    /// <param name="sessionId">A blank or whitespace-only session id.</param>
     [Theory]
     [InlineData("")]
     [InlineData("   ")]
@@ -146,8 +147,8 @@ public sealed class DashboardSessionAclTests
     }
 
     /// <summary>
-    /// A principal carrying no tag claims — the anonymous-localhost / empty-grant Viewer of
-    /// SEC-02 — sees a tagged session never, and an untagged one only when the operator opted
+    /// A principal carrying no tag claims — the anonymous-localhost / empty-grant Viewer —
+    /// sees a tagged session never, and an untagged one only when the operator opted
     /// into <see cref="UntaggedSessionVisibility.AllViewers"/>.
     /// </summary>
     [Fact]
@@ -179,7 +180,7 @@ public sealed class DashboardSessionAclTests
     }
 
     /// <summary>
-    /// SEC-41, the load-bearing regression: a cookie-style principal whose tag claim was stamped
+    /// The load-bearing regression: a cookie-style principal whose tag claim was stamped
     /// at login under an older <c>GroupToTag</c> map is DENIED once that map no longer grants the
     /// tag to any group the principal belongs to. The auth cookie survives the restart that
     /// rebinds options, so trusting the stamped claim let a config-revoked grant live on for the
@@ -224,7 +225,7 @@ public sealed class DashboardSessionAclTests
     /// <summary>
     /// Re-resolution is ordinal-ignore-case on both sides — the group key against the map (which
     /// <see cref="DashboardGroupTagMapping"/> owns) and the resolved tag against the session's tag
-    /// set. Pinned because the pre-SEC-41 claim scan got the second comparison from
+    /// set. Pinned because the earlier claim scan got the second comparison from
     /// <c>Session.Tags</c>'s own comparer, and the re-resolution arm probes the grant set in the
     /// opposite direction.
     /// </summary>
@@ -294,7 +295,7 @@ public sealed class DashboardSessionAclTests
     }
 
     /// <summary>
-    /// Builds a dashboard principal. <paramref name="groups"/> is the SEC-41 discriminator: a
+    /// Builds a dashboard principal. <paramref name="groups"/> is the discriminator: a
     /// principal WITH group claims is re-resolved against the current map (the cookie seam), one
     /// WITHOUT falls back to its stamped tag claims (the hub-token seam). Existing cases pass
     /// tags only, so they continue to exercise the fallback arm exactly as before.