chore(autonomous-session): consolidate uncommitted work from prior session

Bundles the prior autonomous-session output that was sitting unstaged:

- Em-dash sweep across src/ + tests/ (en-dash/em-dash to hyphen, ~2280 instances)
- country-flag-icons rollout (CountryFlag component, replaces emoji glyphs that
  never rendered on Windows; lazy-loads the 3x2 SVG index as a single chunk
  after the per-subpath dynamic-import approach silently failed in webpack)
- Admin IA Phase 1+2: 7-domain regroup, 41 to 38 pages, /admin/berths index,
  redirects (ocr to ai, reports to dashboard, invitations to users),
  docs/admin-ia-proposal.md
- Per-template email tester (registry + endpoint + UI on Email admin page)
- Cancel-document mode picker (delete-from-Documenso vs keep-for-audit)
- Dashboard PDF report: 25 widgets, SVG charts, date-range picker, 11 resolvers
- Customize-widgets per-region sortables at xl+ (charts/rails/feed); single
  flat sortable below xl when the layout stacks; per-viewport saved orders
- Audit doc updates capturing each shipped item
- Lint fixes: react-compiler immutability in DonutChart (reduce instead of
  let-reassign), set-state-in-effect disables in CountryFlag and
  UploadForSigning preview-bytes effect, unused 'confirm' destructures in
  interest contract + reservation tabs, unescaped apostrophe in test-template
  card copy

src/components/admin/shared/registry-driven-form.tsx

@@ -92,7 +92,7 @@ export function RegistryDrivenForm({ sections, title, description, extra }: Prop
       ),
   });
 
-  // Lifted draft state — every field's current input value is held here so
+  // Lifted draft state - every field's current input value is held here so
   // a card-level "Save N changes" button can write them all in one batch.
   // Sensitive fields seed as empty (we never seed cleartext from the server);
   // non-sensitive fields seed from the resolved value.
@@ -313,13 +313,13 @@ function SettingField({
     },
     onSuccess: (r) => {
       if (r.revealed && r.value != null) {
-        // Server reveal — populate draft but do NOT mark dirty (the value
+        // Server reveal - populate draft but do NOT mark dirty (the value
         // already matches what's stored).
         setDraft(r.value, { dirty: false });
         setRevealedFromServer(true);
         setShowSecret(true);
       } else {
-        toast.info(`${entry.label} isn't set — nothing to reveal.`);
+        toast.info(`${entry.label} isn't set - nothing to reveal.`);
       }
     },
     onError: (err) => toastError(err, `Failed to reveal ${entry.label}`),
@@ -439,7 +439,7 @@ function SettingField({
             disabled={
               reveal.isPending ||
               // Disable when the value is resolved from env/default and the
-              // rep hasn't typed anything yet — there's no in-app cleartext
+              // rep hasn't typed anything yet - there's no in-app cleartext
               // path for those, and silently no-op'ing was indistinguishable
               // from a broken toggle.
               (!showSecret &&