docs(src): add missing XML docs and strip tracking-ID comments

Sweep of 203 source files resolving CommentChecker findings: add
<summary>/<param>/<returns>/<inheritdoc> where missing, and remove
resolved task/issue tracking markers (Tests-NNN, Worker-NNN, Server-NNN,
Task N) from code comments. Comment/doc-only — no logic changes.
Server+Tests build clean under TreatWarningsAsErrors.

src/ZB.MOM.WW.MxGateway.Tests/Security/Authorization/GatewayGrpcAuthorizationInterceptorTests.cs

@@ -23,6 +23,7 @@ namespace ZB.MOM.WW.MxGateway.Tests.Security.Authorization;
 public sealed class GatewayGrpcAuthorizationInterceptorTests
 {
     /// <summary>Verifies that missing API key returns unauthenticated status.</summary>
+    /// <returns>A task that represents the asynchronous operation.</returns>
     [Fact]
     public async Task UnaryServerHandler_MissingApiKey_ReturnsUnauthenticated()
     {
@@ -41,6 +42,7 @@ public sealed class GatewayGrpcAuthorizationInterceptorTests
     }
 
     /// <summary>Verifies that invalid API key error does not expose raw credentials.</summary>
+    /// <returns>A task that represents the asynchronous operation.</returns>
     [Fact]
     public async Task UnaryServerHandler_InvalidApiKey_DoesNotExposeRawCredentialInStatus()
     {
@@ -59,6 +61,7 @@ public sealed class GatewayGrpcAuthorizationInterceptorTests
     }
 
     /// <summary>Verifies that valid key without required scope returns permission denied.</summary>
+    /// <returns>A task that represents the asynchronous operation.</returns>
     [Fact]
     public async Task UnaryServerHandler_ValidApiKeyMissingScope_ReturnsPermissionDenied()
     {
@@ -77,6 +80,7 @@ public sealed class GatewayGrpcAuthorizationInterceptorTests
     }
 
     /// <summary>Verifies that valid key with scope sets request identity for the handler.</summary>
+    /// <returns>A task that represents the asynchronous operation.</returns>
     [Fact]
     public async Task UnaryServerHandler_ValidApiKeyWithScope_SetsRequestIdentity()
     {
@@ -103,6 +107,7 @@ public sealed class GatewayGrpcAuthorizationInterceptorTests
     }
 
     /// <summary>Verifies that server stream handler requires proper scope.</summary>
+    /// <returns>A task that represents the asynchronous operation.</returns>
     [Fact]
     public async Task ServerStreamingServerHandler_ValidApiKeyMissingScope_ReturnsPermissionDenied()
     {
@@ -122,6 +127,7 @@ public sealed class GatewayGrpcAuthorizationInterceptorTests
     }
 
     /// <summary>Verifies that server stream handler allows streams with proper scope.</summary>
+    /// <returns>A task that represents the asynchronous operation.</returns>
     [Fact]
     public async Task ServerStreamingServerHandler_ValidApiKeyWithScope_AllowsStream()
     {
@@ -147,6 +153,7 @@ public sealed class GatewayGrpcAuthorizationInterceptorTests
     }
 
     /// <summary>Verifies that disabled authentication skips API key verification.</summary>
+    /// <returns>A task that represents the asynchronous operation.</returns>
     [Fact]
     public async Task UnaryServerHandler_AuthenticationDisabled_SkipsApiKeyVerification()
     {
@@ -173,6 +180,7 @@ public sealed class GatewayGrpcAuthorizationInterceptorTests
     /// that lacks the <c>session:open</c> scope, and asserts the interceptor denies the
     /// call with <see cref="StatusCode.PermissionDenied"/> before the service runs.
     /// </summary>
+    /// <returns>A task that represents the asynchronous operation.</returns>
     [Fact]
     public async Task InterceptorComposedWithService_OpenSessionMissingScope_DeniesBeforeServiceRuns()
     {
@@ -200,6 +208,7 @@ public sealed class GatewayGrpcAuthorizationInterceptorTests
     /// that holds <c>session:open</c>, and asserts the service runs and observes the
     /// interceptor-supplied identity.
     /// </summary>
+    /// <returns>A task that represents the asynchronous operation.</returns>
     [Fact]
     public async Task InterceptorComposedWithService_OpenSessionWithScope_RunsServiceWithIdentity()
     {
@@ -226,6 +235,7 @@ public sealed class GatewayGrpcAuthorizationInterceptorTests
     /// because the wrapped command is a write, confirming command-scope mapping is
     /// enforced through the full composition.
     /// </summary>
+    /// <returns>A task that represents the asynchronous operation.</returns>
     [Fact]
     public async Task InterceptorComposedWithService_InvokeWriteCommandWithReadScope_DeniesBeforeServiceRuns()
     {
@@ -261,6 +271,7 @@ public sealed class GatewayGrpcAuthorizationInterceptorTests
     /// <see cref="GatewayScopes.InvokeWrite"/>. Ack is a write-shaped mutation against
     /// alarm state, so it carries the same scope as <c>MxCommandKind.Write</c>.
     /// </summary>
+    /// <returns>A task that represents the asynchronous operation.</returns>
     [Fact]
     public async Task UnaryServerHandler_AcknowledgeAlarmMissingScope_ReturnsPermissionDenied()
     {
@@ -279,6 +290,7 @@ public sealed class GatewayGrpcAuthorizationInterceptorTests
     }
 
     /// <summary>Verifies that an API key holding <c>invoke:write</c> may call <c>AcknowledgeAlarm</c>.</summary>
+    /// <returns>A task that represents the asynchronous operation.</returns>
     [Fact]
     public async Task UnaryServerHandler_AcknowledgeAlarmWithScope_RunsHandler()
     {
@@ -305,6 +317,7 @@ public sealed class GatewayGrpcAuthorizationInterceptorTests
     /// lack <see cref="GatewayScopes.EventsRead"/>. Active-alarm snapshots are part of the
     /// alarm/event surface and share the same scope as <c>StreamEvents</c>.
     /// </summary>
+    /// <returns>A task that represents the asynchronous operation.</returns>
     [Fact]
     public async Task ServerStreamingServerHandler_QueryActiveAlarmsMissingScope_ReturnsPermissionDenied()
     {
@@ -324,6 +337,7 @@ public sealed class GatewayGrpcAuthorizationInterceptorTests
     }
 
     /// <summary>Verifies that an API key holding <c>events:read</c> may call <c>QueryActiveAlarms</c>.</summary>
+    /// <returns>A task that represents the asynchronous operation.</returns>
     [Fact]
     public async Task ServerStreamingServerHandler_QueryActiveAlarmsWithScope_RunsHandler()
     {