chore(autonomous-session): consolidate uncommitted work from prior session

Bundles the prior autonomous-session output that was sitting unstaged:

- Em-dash sweep across src/ + tests/ (en-dash/em-dash to hyphen, ~2280 instances)
- country-flag-icons rollout (CountryFlag component, replaces emoji glyphs that
  never rendered on Windows; lazy-loads the 3x2 SVG index as a single chunk
  after the per-subpath dynamic-import approach silently failed in webpack)
- Admin IA Phase 1+2: 7-domain regroup, 41 to 38 pages, /admin/berths index,
  redirects (ocr to ai, reports to dashboard, invitations to users),
  docs/admin-ia-proposal.md
- Per-template email tester (registry + endpoint + UI on Email admin page)
- Cancel-document mode picker (delete-from-Documenso vs keep-for-audit)
- Dashboard PDF report: 25 widgets, SVG charts, date-range picker, 11 resolvers
- Customize-widgets per-region sortables at xl+ (charts/rails/feed); single
  flat sortable below xl when the layout stacks; per-viewport saved orders
- Audit doc updates capturing each shipped item
- Lint fixes: react-compiler immutability in DonutChart (reduce instead of
  let-reassign), set-state-in-effect disables in CountryFlag and
  UploadForSigning preview-bytes effect, unused 'confirm' destructures in
  interest contract + reservation tabs, unescaped apostrophe in test-template
  card copy

src/app/(dashboard)/layout.tsx

@@ -38,7 +38,7 @@ export default async function DashboardLayout({ children }: { children: React.Re
     : portRoles.map((pr) => pr.port);
 
   // Prefer a previously-resolved tier from the client's cookie so the
-  // server renders the matching shell on first paint — eliminates the
+  // server renders the matching shell on first paint - eliminates the
   // mobile↔desktop chrome flicker that happens when UA-based classification
   // disagrees with the actual viewport (e.g. macOS Safari with the
   // window dragged below 1024). AppShell writes the cookie after the
@@ -58,7 +58,7 @@ export default async function DashboardLayout({ children }: { children: React.Re
 
   // Per-port logo map for the sidebar. Resolved server-side so the
   // sidebar can swap brand on port switch without an extra round-trip.
-  // Falls back to null per port when no logo is configured — the
+  // Falls back to null per port when no logo is configured - the
   // sidebar surfaces nothing rather than leaking a generic placeholder.
   const portBrandingEntries = await Promise.all(
     ports.map(async (p) => {
@@ -85,7 +85,7 @@ export default async function DashboardLayout({ children }: { children: React.Re
                 flag in prod) so the banner is dev/staging-only. */}
             <DevModeBanner />
             {/* #26: AppShell mounts ONE responsive tree (desktop OR
-             *  mobile) per render — never both — so pages don't pay the
+             *  mobile) per render - never both - so pages don't pay the
              *  double-state, double-fetch, double-Tabs-provider tax. */}
             <AppShell
               portRoles={portRoles}