refactor: strip WP-/RB- ticket refs from backend (RD-19)

The backend half of the sweep RD-18 did for the front end. git blame
holds the provenance and stays correct when the code moves; the
comment names a closed ticket and tells the reader nothing the
sentence around it does not.

public/letter.css and LetterHtml.golden.html change together, because
the renderer inlines the CSS and the golden file snapshots the
result.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

backend/openzaak/setup_configuration/data.prod.yaml.template

@@ -1,10 +1,10 @@
-# Prod counterpart of data.yaml (WP-54's dev-only version, kept as-is for local iteration —
+# Prod counterpart of data.yaml (the dev-only version, kept as-is for local iteration —
 # see docker-compose.openzaak.yml's own comment on why it hardcodes a client secret). This
 # template has no secret in it; render-prod-secrets.sh substitutes OPENZAAK_CLIENT_SECRET
 # into it to produce the gitignored data.prod.yaml that docker-compose.openzaak.prod.yml
 # mounts over the container's data.yaml.
 #
-# Least-privilege client scopes (WP-57): heeft_alle_autorisaties is false, matching the dev
+# Least-privilege client scopes: heeft_alle_autorisaties is false, matching the dev
 # harness (setup_configuration has no YAML field for granular `autorisaties` — see
 # data.yaml's comment). This template only covers infra config; a real deploy must grant this
 # client's Autorisaties the same way bootstrap-catalogus.sh does for the dev harness — via

backend/openzaak/setup_configuration/data.yaml

@@ -2,7 +2,7 @@
 # documented CLI config mechanism — see docker-compose.openzaak.yml) instead of the Django
 # admin. Creates the ONE application the bootstrap script + integration test authenticate as.
 #
-# heeft_alle_autorisaties is false (WP-57, least privilege) — but
+# heeft_alle_autorisaties is false (least privilege) — but
 # `ApplicatieConfigurationModel` (vng_api_common's setup_configuration step) has no field for
 # granular `autorisaties` at all, only this boolean. So this client starts with ZERO scopes;
 # bootstrap-catalogus.sh grants the exact ones it needs via `manage.py shell` (Django ORM,
@@ -12,7 +12,7 @@ sites_config_enable: true
 sites_config:
   items:
     - domain: localhost:8000
-      name: OpenZaak (WP-54 harness)
+      name: OpenZaak (harness)
 
 vng_api_common_credentials_config_enable: true
 vng_api_common_credentials:
@@ -26,5 +26,5 @@ vng_api_common_applicaties:
     - uuid: 5a09b3c9-6a54-4b2b-8f3c-1f9b6b6a3a01
       client_ids:
         - bigregister-test
-      label: BIG-register BFF (WP-54 test harness)
+      label: BIG-register BFF (test harness)
       heeft_alle_autorisaties: false