chore(autonomous-session): consolidate uncommitted work from prior session

Bundles the prior autonomous-session output that was sitting unstaged:

- Em-dash sweep across src/ + tests/ (en-dash/em-dash to hyphen, ~2280 instances)
- country-flag-icons rollout (CountryFlag component, replaces emoji glyphs that
  never rendered on Windows; lazy-loads the 3x2 SVG index as a single chunk
  after the per-subpath dynamic-import approach silently failed in webpack)
- Admin IA Phase 1+2: 7-domain regroup, 41 to 38 pages, /admin/berths index,
  redirects (ocr to ai, reports to dashboard, invitations to users),
  docs/admin-ia-proposal.md
- Per-template email tester (registry + endpoint + UI on Email admin page)
- Cancel-document mode picker (delete-from-Documenso vs keep-for-audit)
- Dashboard PDF report: 25 widgets, SVG charts, date-range picker, 11 resolvers
- Customize-widgets per-region sortables at xl+ (charts/rails/feed); single
  flat sortable below xl when the layout stacks; per-viewport saved orders
- Audit doc updates capturing each shipped item
- Lint fixes: react-compiler immutability in DonutChart (reduce instead of
  let-reassign), set-state-in-effect disables in CountryFlag and
  UploadForSigning preview-bytes effect, unused 'confirm' destructures in
  interest contract + reservation tabs, unescaped apostrophe in test-template
  card copy

src/lib/settings/resolver.ts

@@ -12,7 +12,7 @@ import type { ResolvedSetting, SettingEntry, SettingSource } from './types';
 
 /**
  * Stored shape for encrypted JSONB values. The encrypt() helper returns a
- * JSON string of this shape — we wrap it in the JSONB column verbatim.
+ * JSON string of this shape - we wrap it in the JSONB column verbatim.
  */
 interface EncryptedEnvelope {
   iv: string;
@@ -32,7 +32,7 @@ function isEncryptedEnvelope(value: unknown): value is EncryptedEnvelope {
 
 /**
  * Validator inferred from the entry type when no explicit `validator` is set.
- * Keeps the registry concise — only override when standard rules don't fit.
+ * Keeps the registry concise - only override when standard rules don't fit.
  */
 function defaultValidator(entry: SettingEntry): z.ZodTypeAny {
   if (entry.validator) return entry.validator;
@@ -163,7 +163,7 @@ export async function getSetting<T = unknown>(
 }
 
 /**
- * Batch resolver — efficient for the admin form which needs every field in a
+ * Batch resolver - efficient for the admin form which needs every field in a
  * section. Returns a map keyed by setting key.
  */
 export async function resolveSettings(
@@ -222,7 +222,7 @@ export async function writeSetting(
 
   // Empty value on a settable field == delete the row (revert to fallback).
   // Sensitive/encrypted: empty input means "don't change" rather than
-  // "revert" — UI shows ••• placeholder so an unchanged save shouldn't
+  // "revert" - UI shows ••• placeholder so an unchanged save shouldn't
   // wipe the stored ciphertext. The dedicated DELETE endpoint exists for
   // explicit reverts.
   if (rawValue === '' || rawValue == null) {
@@ -276,7 +276,7 @@ export async function writeSetting(
       },
     });
 
-  // Audit-log with redaction for sensitive / encrypted fields — fixes AU-02
+  // Audit-log with redaction for sensitive / encrypted fields - fixes AU-02
   // (encrypted ciphertext stored in audit_logs.new_value).
   const isSecret = entry.encrypted || entry.sensitive;
   void createAuditLog({