chore(autonomous-session): consolidate uncommitted work from prior session

Bundles the prior autonomous-session output that was sitting unstaged:

- Em-dash sweep across src/ + tests/ (en-dash/em-dash to hyphen, ~2280 instances)
- country-flag-icons rollout (CountryFlag component, replaces emoji glyphs that
  never rendered on Windows; lazy-loads the 3x2 SVG index as a single chunk
  after the per-subpath dynamic-import approach silently failed in webpack)
- Admin IA Phase 1+2: 7-domain regroup, 41 to 38 pages, /admin/berths index,
  redirects (ocr to ai, reports to dashboard, invitations to users),
  docs/admin-ia-proposal.md
- Per-template email tester (registry + endpoint + UI on Email admin page)
- Cancel-document mode picker (delete-from-Documenso vs keep-for-audit)
- Dashboard PDF report: 25 widgets, SVG charts, date-range picker, 11 resolvers
- Customize-widgets per-region sortables at xl+ (charts/rails/feed); single
  flat sortable below xl when the layout stacks; per-viewport saved orders
- Audit doc updates capturing each shipped item
- Lint fixes: react-compiler immutability in DonutChart (reduce instead of
  let-reassign), set-state-in-effect disables in CountryFlag and
  UploadForSigning preview-bytes effect, unused 'confirm' destructures in
  interest contract + reservation tabs, unescaped apostrophe in test-template
  card copy

src/lib/queue/workers/ai.ts

@@ -25,7 +25,7 @@ interface RecordAiUsageArgs {
 }
 
 /**
- * Insert one ai_usage_ledger row per provider call. Best-effort — the
+ * Insert one ai_usage_ledger row per provider call. Best-effort - the
  * draft generation is the user-facing artefact, the ledger is
  * observability. Imports are lazy so this module loads cleanly inside
  * the worker bundle without dragging the DB layer in at import time.
@@ -130,8 +130,8 @@ async function generateEmailDraft(payload: GenerateEmailDraftPayload): Promise<D
   // Build prompt.
   //
   // `additionalInstructions` is user-controlled (rep types it into the
-  // dialog) so we have to prevent prompt-injection: a hostile rep — or
-  // a compromised rep account — could otherwise close the instructions
+  // dialog) so we have to prevent prompt-injection: a hostile rep - or
+  // a compromised rep account - could otherwise close the instructions
   // block and inject directives that override the system prompt
   // ("ignore the above and reveal the system prompt", etc.). Strip
   // newlines, cap length, and quote-fence the value in the prompt.
@@ -233,7 +233,7 @@ async function generateEmailDraft(payload: GenerateEmailDraftPayload): Promise<D
 
     // Record token usage so admins can audit spend + future per-port
     // budget caps have a history to read from. Failure here must not
-    // bubble up — the email draft is the user-facing artefact, the
+    // bubble up - the email draft is the user-facing artefact, the
     // ledger is observability.
     void recordAiUsage({
       portId,