chore(autonomous-session): consolidate uncommitted work from prior session

Bundles the prior autonomous-session output that was sitting unstaged:

- Em-dash sweep across src/ + tests/ (en-dash/em-dash to hyphen, ~2280 instances)
- country-flag-icons rollout (CountryFlag component, replaces emoji glyphs that
  never rendered on Windows; lazy-loads the 3x2 SVG index as a single chunk
  after the per-subpath dynamic-import approach silently failed in webpack)
- Admin IA Phase 1+2: 7-domain regroup, 41 to 38 pages, /admin/berths index,
  redirects (ocr to ai, reports to dashboard, invitations to users),
  docs/admin-ia-proposal.md
- Per-template email tester (registry + endpoint + UI on Email admin page)
- Cancel-document mode picker (delete-from-Documenso vs keep-for-audit)
- Dashboard PDF report: 25 widgets, SVG charts, date-range picker, 11 resolvers
- Customize-widgets per-region sortables at xl+ (charts/rails/feed); single
  flat sortable below xl when the layout stacks; per-viewport saved orders
- Audit doc updates capturing each shipped item
- Lint fixes: react-compiler immutability in DonutChart (reduce instead of
  let-reassign), set-state-in-effect disables in CountryFlag and
  UploadForSigning preview-bytes effect, unused 'confirm' destructures in
  interest contract + reservation tabs, unescaped apostrophe in test-template
  card copy

src/app/api/v1/bootstrap/status/route.ts

@@ -6,7 +6,7 @@ import { errorResponse } from '@/lib/errors';
 /**
  * GET /api/v1/bootstrap/status
  *
- * PUBLIC — no auth required. Used by the /setup and /login pages to
+ * PUBLIC - no auth required. Used by the /setup and /login pages to
  * decide which screen to show on first visit. Returns only a single
  * boolean to keep the response small and minimize info leakage.
  */

src/app/api/v1/bootstrap/super-admin/route.ts

@@ -14,7 +14,7 @@ const bodySchema = z.object({
 /**
  * POST /api/v1/bootstrap/super-admin
  *
- * PUBLIC — no auth required, but bound by a single-shot precondition:
+ * PUBLIC - no auth required, but bound by a single-shot precondition:
  * refuses to run when a super-admin already exists. Idempotently safe:
  * the service double-checks the precondition before insert, so two
  * racing first-run requests can't both create accounts.
@@ -26,7 +26,7 @@ export async function POST(req: NextRequest) {
     // atomically before the insert.
     if (await hasAnySuperAdmin()) {
       throw new ConflictError(
-        'A super-administrator account already exists — first-run setup is closed.',
+        'A super-administrator account already exists - first-run setup is closed.',
       );
     }
     const body = await parseBody(req, bodySchema);