chore(autonomous-session): consolidate uncommitted work from prior session

Bundles the prior autonomous-session output that was sitting unstaged:

- Em-dash sweep across src/ + tests/ (en-dash/em-dash to hyphen, ~2280 instances)
- country-flag-icons rollout (CountryFlag component, replaces emoji glyphs that
  never rendered on Windows; lazy-loads the 3x2 SVG index as a single chunk
  after the per-subpath dynamic-import approach silently failed in webpack)
- Admin IA Phase 1+2: 7-domain regroup, 41 to 38 pages, /admin/berths index,
  redirects (ocr to ai, reports to dashboard, invitations to users),
  docs/admin-ia-proposal.md
- Per-template email tester (registry + endpoint + UI on Email admin page)
- Cancel-document mode picker (delete-from-Documenso vs keep-for-audit)
- Dashboard PDF report: 25 widgets, SVG charts, date-range picker, 11 resolvers
- Customize-widgets per-region sortables at xl+ (charts/rails/feed); single
  flat sortable below xl when the layout stacks; per-viewport saved orders
- Audit doc updates capturing each shipped item
- Lint fixes: react-compiler immutability in DonutChart (reduce instead of
  let-reassign), set-state-in-effect disables in CountryFlag and
  UploadForSigning preview-bytes effect, unused 'confirm' destructures in
  interest contract + reservation tabs, unescaped apostrophe in test-template
  card copy

src/providers/port-provider.tsx

@@ -51,7 +51,7 @@ export function PortProvider({ children, ports, defaultPortId }: PortProviderPro
   // Remember the last port the user landed on (URL-derived or
   // explicit-switch) so the next login routes here automatically. Tracked
   // in a ref-keyed dedupe so we only PATCH when the active port actually
-  // changes — re-renders inside the same port don't write. Fire-and-forget;
+  // changes - re-renders inside the same port don't write. Fire-and-forget;
   // a transient network failure shouldn't block navigation, and the
   // post-login resolver verifies access so a stale value can't strand the
   // user on a 403.
@@ -64,7 +64,7 @@ export function PortProvider({ children, ports, defaultPortId }: PortProviderPro
       method: 'PATCH',
       body: { preferences: { defaultPortId: currentPort.id } },
     }).catch(() => {
-      /* silent — best-effort */
+      /* silent - best-effort */
     });
   }, [currentPort]);
 

src/providers/socket-provider.tsx

@@ -59,7 +59,7 @@ function SocketProviderClient({ children }: { children: ReactNode }) {
 
   useEffect(() => {
     if (!session?.user || !currentPortId) {
-      // Tear down the socket on session/port loss — canonical
+      // Tear down the socket on session/port loss - canonical
       // subscription-cleanup pattern.
       // eslint-disable-next-line react-hooks/set-state-in-effect
       setSocket(null);
@@ -67,7 +67,7 @@ function SocketProviderClient({ children }: { children: ReactNode }) {
       return;
     }
 
-    // Connect to whatever origin the page was loaded from — `io()` with
+    // Connect to whatever origin the page was loaded from - `io()` with
     // no URL defaults to window.location. This used to read
     // NEXT_PUBLIC_APP_URL, which baked the deploy-time canonical URL
     // (localhost in dev) and broke realtime when the same dev server