chore(autonomous-session): consolidate uncommitted work from prior session

Bundles the prior autonomous-session output that was sitting unstaged:

- Em-dash sweep across src/ + tests/ (en-dash/em-dash to hyphen, ~2280 instances)
- country-flag-icons rollout (CountryFlag component, replaces emoji glyphs that
  never rendered on Windows; lazy-loads the 3x2 SVG index as a single chunk
  after the per-subpath dynamic-import approach silently failed in webpack)
- Admin IA Phase 1+2: 7-domain regroup, 41 to 38 pages, /admin/berths index,
  redirects (ocr to ai, reports to dashboard, invitations to users),
  docs/admin-ia-proposal.md
- Per-template email tester (registry + endpoint + UI on Email admin page)
- Cancel-document mode picker (delete-from-Documenso vs keep-for-audit)
- Dashboard PDF report: 25 widgets, SVG charts, date-range picker, 11 resolvers
- Customize-widgets per-region sortables at xl+ (charts/rails/feed); single
  flat sortable below xl when the layout stacks; per-viewport saved orders
- Audit doc updates capturing each shipped item
- Lint fixes: react-compiler immutability in DonutChart (reduce instead of
  let-reassign), set-state-in-effect disables in CountryFlag and
  UploadForSigning preview-bytes effect, unused 'confirm' destructures in
  interest contract + reservation tabs, unescaped apostrophe in test-template
  card copy

src/lib/env.ts

@@ -17,11 +17,11 @@ const envSchema = z
     // The settings registry at src/lib/settings/registry.ts wires each of
     // these into the per-port admin UI with port → global → env → default
     // precedence. They're optional here so a fresh deploy without an env
-    // file can still boot — the operator configures everything via
+    // file can still boot - the operator configures everything via
     // /admin/<integration> after first super-admin login. See
     // docs/superpowers/specs/2026-05-15-env-to-admin-migration-design.md.
 
-    // MinIO / S3 (storage backend) — admin: /admin/storage
+    // MinIO / S3 (storage backend) - admin: /admin/storage
     MINIO_ENDPOINT: z.string().min(1).optional(),
     MINIO_PORT: z.coerce.number().int().positive().optional(),
     MINIO_ACCESS_KEY: z.string().min(1).optional(),
@@ -32,7 +32,7 @@ const envSchema = z
       .optional()
       .transform((v) => (v == null ? undefined : v === 'true')),
 
-    // Documenso — admin: /admin/documenso
+    // Documenso - admin: /admin/documenso
     DOCUMENSO_API_URL: z.string().url().optional(),
     DOCUMENSO_API_KEY: z.string().min(1).optional(),
     DOCUMENSO_API_VERSION: z.enum(['v1', 'v2']).default('v1'),
@@ -42,7 +42,7 @@ const envSchema = z
     DOCUMENSO_DEVELOPER_RECIPIENT_ID: z.coerce.number().int().positive().optional(),
     DOCUMENSO_APPROVAL_RECIPIENT_ID: z.coerce.number().int().positive().optional(),
 
-    // Email / SMTP — admin: /admin/email
+    // Email / SMTP - admin: /admin/email
     SMTP_HOST: z.string().min(1).optional(),
     SMTP_PORT: z.coerce.number().int().positive().optional(),
     SMTP_USER: z.string().optional(),
@@ -65,19 +65,19 @@ const envSchema = z
     // Shared secret used by the marketing website's server-side dual-write
     // helper (POST to /api/public/website-inquiries). Set the SAME value on
     // the website's CRM_INTAKE_SECRET env. Leave unset in dev/staging until
-    // the website's CRM_INTAKE_URL is also set — without this, the public
+    // the website's CRM_INTAKE_URL is also set - without this, the public
     // intake endpoint refuses every request.
     WEBSITE_INTAKE_SECRET: z.string().min(16).optional(),
 
     // OpenAI (optional)
     OPENAI_API_KEY: z.string().optional(),
 
-    // Sentry (optional — when unset the SDK is a no-op)
+    // Sentry (optional - when unset the SDK is a no-op)
     NEXT_PUBLIC_SENTRY_DSN: z.string().url().optional(),
     SENTRY_ENVIRONMENT: z.string().optional(),
     SENTRY_TRACES_SAMPLE_RATE: z.coerce.number().min(0).max(1).default(0.1),
 
-    // App URLs — admin: /admin/general (TODO once general admin page exists;
+    // App URLs - admin: /admin/general (TODO once general admin page exists;
     // for now write via the API: PUT /api/v1/admin/settings/app_url)
     APP_URL: z.string().url(),
     PUBLIC_SITE_URL: z.string().url().optional(),
@@ -124,7 +124,7 @@ const envSchema = z
         code: z.ZodIssueCode.custom,
         path: ['EMAIL_REDIRECT_TO'],
         message:
-          'EMAIL_REDIRECT_TO must NOT be set in production — it silently rewrites every outbound email recipient. Unset it before deploying.',
+          'EMAIL_REDIRECT_TO must NOT be set in production - it silently rewrites every outbound email recipient. Unset it before deploying.',
       });
     }
   });