chore(autonomous-session): consolidate uncommitted work from prior session

Bundles the prior autonomous-session output that was sitting unstaged:

- Em-dash sweep across src/ + tests/ (en-dash/em-dash to hyphen, ~2280 instances)
- country-flag-icons rollout (CountryFlag component, replaces emoji glyphs that
  never rendered on Windows; lazy-loads the 3x2 SVG index as a single chunk
  after the per-subpath dynamic-import approach silently failed in webpack)
- Admin IA Phase 1+2: 7-domain regroup, 41 to 38 pages, /admin/berths index,
  redirects (ocr to ai, reports to dashboard, invitations to users),
  docs/admin-ia-proposal.md
- Per-template email tester (registry + endpoint + UI on Email admin page)
- Cancel-document mode picker (delete-from-Documenso vs keep-for-audit)
- Dashboard PDF report: 25 widgets, SVG charts, date-range picker, 11 resolvers
- Customize-widgets per-region sortables at xl+ (charts/rails/feed); single
  flat sortable below xl when the layout stacks; per-viewport saved orders
- Audit doc updates capturing each shipped item
- Lint fixes: react-compiler immutability in DonutChart (reduce instead of
  let-reassign), set-state-in-effect disables in CountryFlag and
  UploadForSigning preview-bytes effect, unused 'confirm' destructures in
  interest contract + reservation tabs, unescaped apostrophe in test-template
  card copy

src/app/api/v1/berths/[id]/interest-documents/route.ts

@@ -6,7 +6,7 @@ import { listDealDocumentsForBerth } from '@/lib/services/documents.service';
 
 /**
  * GET /api/v1/berths/[id]/interest-documents (renamed from
- * `/deal-documents` in the 2026-05-14 terminology sweep — canonical
+ * `/deal-documents` in the 2026-05-14 terminology sweep - canonical
  * noun is "interest").
  *
  * Lists documents attached to interests currently linked to this berth.

src/app/api/v1/berths/[id]/pdf-upload-url/handlers.ts

@@ -21,7 +21,7 @@ import { getStorageBackend } from '@/lib/storage';
 
 const postBodySchema = z.object({
   fileName: z.string().min(1).max(255),
-  /** Size hint in bytes — used to early-reject oversized uploads before we
+  /** Size hint in bytes - used to early-reject oversized uploads before we
    *  burn a presigned URL. */
   sizeBytes: z.number().int().nonnegative().optional(),
 });

src/app/api/v1/berths/[id]/pdf-versions/handlers.ts

@@ -44,7 +44,7 @@ export const getHandler: RouteHandler = async (_req, ctx, params) => {
 // and pdf-upload-url tenant-scopes the berth lookup. Without this regex,
 // a rep with berths.edit could ship the storage key of a foreign-port
 // PDF (signed EOI, brochure blob, another port's berth) and have the
-// service repoint THIS berth's currentPdfVersionId at it — subsequent
+// service repoint THIS berth's currentPdfVersionId at it - subsequent
 // pdf-download serves those bytes under the rep's own permission gate.
 const STORAGE_KEY_RE =
   /^berths\/[A-Za-z0-9_-]+\/uploads\/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}_/;

src/app/api/v1/berths/bulk-add/route.ts

@@ -16,7 +16,7 @@ import { bulkAddBerthsSchema } from '@/lib/validators/berths';
  */
 export const POST = withAuth(
   // F13: aligned with the seed-permissions scope (`berths.import`).
-  // The previous `berths.create` was a phantom key — not in the role
+  // The previous `berths.create` was a phantom key - not in the role
   // matrix, so non-super-admins silently failed permission resolution.
   withPermission('berths', 'import', async (req, ctx) => {
     try {

src/app/api/v1/berths/bulk-update-prices/route.ts

@@ -13,7 +13,7 @@ import { errorResponse } from '@/lib/errors';
  * Gated by `berths.update_prices`. Returns counts so the UI can present
  * "Updated N · Unchanged M · Missing K" feedback.
  *
- * Audit: one `audit_log` row per actually-updated berth (idempotent —
+ * Audit: one `audit_log` row per actually-updated berth (idempotent -
  * berths whose new price matches the existing value are skipped and
  * counted as `unchanged`).
  */

src/app/api/v1/berths/bulk/route.ts

@@ -15,7 +15,7 @@ import {
 import { errorResponse } from '@/lib/errors';
 
 /**
- * Synchronous bulk endpoint for the berths list — mirrors the
+ * Synchronous bulk endpoint for the berths list - mirrors the
  * /api/v1/interests/bulk shape so the rep-facing UX is consistent.
  *
  * Per-row loop with a 500-id cap. Bigger jobs belong on the BullMQ
@@ -58,7 +58,7 @@ interface RowResult {
 }
 
 // Berths share a single `edit` permission for non-price mutations (no
-// separate `archive` perm today — sales-manager + super-admin own all
+// separate `archive` perm today - sales-manager + super-admin own all
 // edit paths).
 const PERMISSION_BY_ACTION: Record<
   z.infer<typeof bulkSchema>['action'],

src/app/api/v1/berths/check-duplicates/route.ts

@@ -25,7 +25,7 @@ const checkSchema = z.object({
  * surfacing the constraint violation at submit time.
  *
  * Format validation mirrors the CLAUDE.md canonical (`^[A-Z]+\d+$`).
- * Archived berths are excluded — bulk-add re-using a previously-archived
+ * Archived berths are excluded - bulk-add re-using a previously-archived
  * mooring number is a legitimate flow.
  *
  * Permission gating: `berths.import` (same scope as bulk-add itself).