chore(autonomous-session): consolidate uncommitted work from prior session

Bundles the prior autonomous-session output that was sitting unstaged:

- Em-dash sweep across src/ + tests/ (en-dash/em-dash to hyphen, ~2280 instances)
- country-flag-icons rollout (CountryFlag component, replaces emoji glyphs that
  never rendered on Windows; lazy-loads the 3x2 SVG index as a single chunk
  after the per-subpath dynamic-import approach silently failed in webpack)
- Admin IA Phase 1+2: 7-domain regroup, 41 to 38 pages, /admin/berths index,
  redirects (ocr to ai, reports to dashboard, invitations to users),
  docs/admin-ia-proposal.md
- Per-template email tester (registry + endpoint + UI on Email admin page)
- Cancel-document mode picker (delete-from-Documenso vs keep-for-audit)
- Dashboard PDF report: 25 widgets, SVG charts, date-range picker, 11 resolvers
- Customize-widgets per-region sortables at xl+ (charts/rails/feed); single
  flat sortable below xl when the layout stacks; per-viewport saved orders
- Audit doc updates capturing each shipped item
- Lint fixes: react-compiler immutability in DonutChart (reduce instead of
  let-reassign), set-state-in-effect disables in CountryFlag and
  UploadForSigning preview-bytes effect, unused 'confirm' destructures in
  interest contract + reservation tabs, unescaped apostrophe in test-template
  card copy

src/app/api/v1/expenses/export/pdf/route.ts

@@ -9,7 +9,7 @@ import { exportExpensePdfSchema } from '@/lib/validators/expenses';
 /**
  * POST /api/v1/expenses/export/pdf
  *
- * Streams the expense report PDF directly to the client — body bytes
+ * Streams the expense report PDF directly to the client - body bytes
  * leave the process as pdfkit writes them, so the route is safe for
  * hundreds of expenses with full-resolution receipt images. See
  * `expense-pdf.service.ts` for the memory-budget design.
@@ -53,7 +53,7 @@ export const POST = withAuth(
         // Forward the request abort signal so the streaming PDF builder
         // stops fetching/resizing receipts the moment the client disconnects
         // (otherwise an aborted 1000-receipt export keeps the worker busy
-        // for minutes after the user navigated away — see audit finding 2).
+        // for minutes after the user navigated away - see audit finding 2).
         signal: req.signal,
       });
 

src/app/api/v1/expenses/scan-receipt/route.ts

@@ -30,7 +30,7 @@ export const POST = withAuth(
         const formData = await req.formData();
         const file = formData.get('file') as File | null;
         if (!file) throw new ValidationError('A file is required');
-        // Hard 10 MB cap — without this any authenticated rep could grief
+        // Hard 10 MB cap - without this any authenticated rep could grief
         // their own port's AI budget by sending arbitrarily large images
         // and burning OCR tokens (auditor-E3 §28).
         const MAX_OCR_BYTES = 10 * 1024 * 1024;

src/app/api/v1/expenses/trip-labels/route.ts

@@ -13,7 +13,7 @@ import { listTripLabels } from '@/lib/services/expenses';
  * "Palm Beach 2026" vs " palm beach 2026 " split across two groups in
  * the PDF export.
  *
- * Permission: `expenses.view` — same gate as the list endpoint.
+ * Permission: `expenses.view` - same gate as the list endpoint.
  */
 export const GET = withAuth(
   withPermission('expenses', 'view', async (req, ctx) => {