docs(src): add missing XML docs and strip tracking-ID comments

Sweep of 203 source files resolving CommentChecker findings: add
<summary>/<param>/<returns>/<inheritdoc> where missing, and remove
resolved task/issue tracking markers (Tests-NNN, Worker-NNN, Server-NNN,
Task N) from code comments. Comment/doc-only — no logic changes.
Server+Tests build clean under TreatWarningsAsErrors.

src/ZB.MOM.WW.MxGateway.Server/Security/Audit/CanonicalAuditWriter.cs

@@ -19,7 +19,13 @@ public sealed class CanonicalAuditWriter(
     SqliteCanonicalAuditStore store,
     ILogger<CanonicalAuditWriter> logger) : IAuditWriter
 {
-    /// <inheritdoc />
+    /// <summary>
+    /// Persists a canonical audit event to the underlying <see cref="SqliteCanonicalAuditStore"/>.
+    /// Any failure is caught, logged, and swallowed rather than propagated to the caller.
+    /// </summary>
+    /// <param name="auditEvent">The canonical audit event to persist.</param>
+    /// <param name="cancellationToken">Token to cancel the underlying store write.</param>
+    /// <returns>A task that represents the asynchronous operation.</returns>
     public async Task WriteAsync(AuditEvent auditEvent, CancellationToken cancellationToken = default)
     {
         ArgumentNullException.ThrowIfNull(auditEvent);

src/ZB.MOM.WW.MxGateway.Server/Security/Audit/CanonicalForwardingApiKeyAuditStore.cs

@@ -43,7 +43,10 @@ public sealed class CanonicalForwardingApiKeyAuditStore(
     /// <summary>The library's keyless schema-init event type.</summary>
     private const string InitDbEventType = "init-db";
 
-    /// <inheritdoc />
+    /// <summary>Canonicalizes a library-emitted API-key audit entry onto <see cref="AuditEvent"/> and writes it via <see cref="IAuditWriter"/>.</summary>
+    /// <param name="entry">The library's API-key audit entry to forward.</param>
+    /// <param name="ct">Token to observe for cancellation.</param>
+    /// <returns>A task that represents the asynchronous operation.</returns>
     public async Task AppendAsync(ApiKeyAuditEntry entry, CancellationToken ct)
     {
         ArgumentNullException.ThrowIfNull(entry);
@@ -71,7 +74,10 @@ public sealed class CanonicalForwardingApiKeyAuditStore(
         await auditWriter.WriteAsync(auditEvent, ct).ConfigureAwait(false);
     }
 
-    /// <inheritdoc />
+    /// <summary>Reads back the most recent entries from the canonical audit store and maps each one to an <see cref="ApiKeyAuditEntry"/>.</summary>
+    /// <param name="limit">The maximum number of entries to return.</param>
+    /// <param name="ct">Token to observe for cancellation.</param>
+    /// <returns>Up to <paramref name="limit"/> recent API-key audit entries.</returns>
     public async Task<IReadOnlyList<ApiKeyAuditEntry>> ListRecentAsync(int limit, CancellationToken ct)
     {
         IReadOnlyList<AuditEvent> events = await store.ListRecentAsync(limit, ct).ConfigureAwait(false);

src/ZB.MOM.WW.MxGateway.Server/Security/Audit/SqliteCanonicalAuditStore.cs

@@ -43,6 +43,7 @@ public sealed class SqliteCanonicalAuditStore(AuthSqliteConnectionFactory connec
     /// <summary>Inserts a canonical audit event into the <c>audit_event</c> table.</summary>
     /// <param name="auditEvent">The canonical event to persist.</param>
     /// <param name="cancellationToken">Token to observe for cancellation.</param>
+    /// <returns>A task that represents the asynchronous operation.</returns>
     public async Task InsertAsync(AuditEvent auditEvent, CancellationToken cancellationToken)
     {
         ArgumentNullException.ThrowIfNull(auditEvent);
@@ -79,6 +80,7 @@ public sealed class SqliteCanonicalAuditStore(AuthSqliteConnectionFactory connec
     /// <summary>Returns the most recent canonical audit events, newest first.</summary>
     /// <param name="limit">Maximum number of events to return.</param>
     /// <param name="cancellationToken">Token to observe for cancellation.</param>
+    /// <returns>The most recent audit events, up to <paramref name="limit"/>, newest first.</returns>
     public async Task<IReadOnlyList<AuditEvent>> ListRecentAsync(int limit, CancellationToken cancellationToken)
     {
         if (limit <= 0)