chore(autonomous-session): consolidate uncommitted work from prior session

Bundles the prior autonomous-session output that was sitting unstaged:

- Em-dash sweep across src/ + tests/ (en-dash/em-dash to hyphen, ~2280 instances)
- country-flag-icons rollout (CountryFlag component, replaces emoji glyphs that
  never rendered on Windows; lazy-loads the 3x2 SVG index as a single chunk
  after the per-subpath dynamic-import approach silently failed in webpack)
- Admin IA Phase 1+2: 7-domain regroup, 41 to 38 pages, /admin/berths index,
  redirects (ocr to ai, reports to dashboard, invitations to users),
  docs/admin-ia-proposal.md
- Per-template email tester (registry + endpoint + UI on Email admin page)
- Cancel-document mode picker (delete-from-Documenso vs keep-for-audit)
- Dashboard PDF report: 25 widgets, SVG charts, date-range picker, 11 resolvers
- Customize-widgets per-region sortables at xl+ (charts/rails/feed); single
  flat sortable below xl when the layout stacks; per-viewport saved orders
- Audit doc updates capturing each shipped item
- Lint fixes: react-compiler immutability in DonutChart (reduce instead of
  let-reassign), set-state-in-effect disables in CountryFlag and
  UploadForSigning preview-bytes effect, unused 'confirm' destructures in
  interest contract + reservation tabs, unescaped apostrophe in test-template
  card copy

tests/e2e/realapi/alert-engine-realtime.spec.ts

@@ -19,7 +19,7 @@ import { login, apiHeaders, getPortId } from '../smoke/helpers';
 const SOCKET_URL =
   process.env.NEXT_PUBLIC_SOCKET_URL ?? process.env.SOCKET_URL ?? 'http://localhost:3000';
 
-test.describe('Alert engine — socket fanout', () => {
+test.describe('Alert engine - socket fanout', () => {
   test.skip(
     !process.env.RUN_ALERT_ENGINE_REALAPI,
     'RUN_ALERT_ENGINE_REALAPI not set (opt-in; emits real events)',

tests/e2e/realapi/documenso-cancel.spec.ts

@@ -31,7 +31,7 @@ test.describe('Documenso cancel pathway', () => {
     // Seed a minimal client to ensure a doc can be created. Real cancel
     // testing assumes either an existing in-flight doc or the wizard flow
     // has already produced one. We probe the hub for an in-flight doc and
-    // skip if none — this lets the spec run as a smoke check rather than
+    // skip if none - this lets the spec run as a smoke check rather than
     // a fixture-dependent integration.
     const list = await page.request.get(
       '/api/v1/documents?tab=awaiting_them&signatureOnly=true&limit=1',

tests/e2e/realapi/documenso-real-api.spec.ts

@@ -6,7 +6,7 @@ import { login, apiHeaders } from '../smoke/helpers';
 /**
  * Real-API end-to-end test for the Documenso documenso-template pathway.
  *
- * This spec exercises the SEND side of the integration only — it creates a
+ * This spec exercises the SEND side of the integration only - it creates a
  * fully-loaded interest, fires generate-and-sign, and asserts both
  *   (a) the CRM persisted a documensoId on the documents row, and
  *   (b) Documenso itself returns 200 for the freshly-created document.

tests/e2e/realapi/email-attachments-roundtrip.spec.ts

@@ -17,7 +17,7 @@ import { login, apiHeaders } from '../smoke/helpers';
 const SMTP_HOST = process.env.SMTP_HOST;
 const OTHER_PORT_FILE_ID = process.env.PHASE_A_CROSS_PORT_FILE_ID;
 
-test.describe('Email attachments — port isolation', () => {
+test.describe('Email attachments - port isolation', () => {
   test.skip(!SMTP_HOST || !OTHER_PORT_FILE_ID, 'cross-port fixture not configured');
 
   test.beforeEach(async ({ page }) => {

tests/e2e/realapi/minio-file-lifecycle.spec.ts

@@ -49,7 +49,7 @@ test.describe('MinIO file lifecycle', () => {
     const listBody = (await list.json()) as { data: Array<{ id: string }> };
     expect(listBody.data.find((f) => f.id === fileId)).toBeDefined();
 
-    // Download — assert byte-equality
+    // Download - assert byte-equality
     const dlRes = await page.request.get(`/api/v1/files/${fileId}/download`, { headers });
     expect(dlRes.ok()).toBe(true);
     const dlBody = await dlRes.body();

tests/e2e/realapi/portal-imap-activation.spec.ts

@@ -22,7 +22,7 @@ import { login, apiHeaders } from '../smoke/helpers';
  * routes back to the same inbox via standard +addressing.
  *
  * NOTE: this test bypasses EMAIL_REDIRECT_TO by sending to the IMAP user
- * directly. If EMAIL_REDIRECT_TO is set, the redirect still applies — but
+ * directly. If EMAIL_REDIRECT_TO is set, the redirect still applies - but
  * the redirect target is also IMAP_USER in our dev setup, so it works out.
  */
 
@@ -129,7 +129,7 @@ test.describe('Portal activation: SMTP + IMAP round-trip', () => {
     expect(inviteRes.ok(), `invite: ${inviteRes.status()} ${await inviteRes.text()}`).toBe(true);
 
     // ─── 3-4. Poll IMAP and extract the activation token ─────────────────────
-    // Match on the +addressed recipient — that's what's preserved in the TO
+    // Match on the +addressed recipient - that's what's preserved in the TO
     // header even after the mailserver delivers it back to IMAP_USER's inbox.
     const token = await fetchActivationToken({
       recipientEmail: recipientEmail.toLowerCase(),

tests/e2e/realapi/receipt-ocr.spec.ts

@@ -9,7 +9,7 @@ import { login, apiHeaders, getPortId } from '../smoke/helpers';
  *
  *   1. Admin save + test-connection round-trip: writes a real OpenAI key
  *      to the global OCR config, calls /admin/ocr-settings/test (which
- *      sends a 1×1 pixel PNG — essentially free in tokens), and asserts
+ *      sends a 1×1 pixel PNG - essentially free in tokens), and asserts
  *      the provider responds 2xx. Validates the auth + key-storage path.
  *
  *   2. Real receipt parse: when REALAPI_RECEIPT_FIXTURE is set to an
@@ -24,7 +24,7 @@ import { login, apiHeaders, getPortId } from '../smoke/helpers';
 const OPENAI_API_KEY = process.env.OPENAI_API_KEY;
 const RECEIPT_FIXTURE = process.env.REALAPI_RECEIPT_FIXTURE;
 
-test.describe('Receipt OCR — real provider', () => {
+test.describe('Receipt OCR - real provider', () => {
   test.skip(!OPENAI_API_KEY, 'OPENAI_API_KEY not configured');
 
   test('admin can save an OpenAI key and the test endpoint passes', async ({ page }) => {
@@ -110,7 +110,7 @@ test.describe('Receipt OCR — real provider', () => {
       };
     };
     expect(body.data.source).toBe('ai');
-    // Confidence must be a valid number 0..1 — provider should always emit it.
+    // Confidence must be a valid number 0..1 - provider should always emit it.
     expect(body.data.parsed.confidence).toBeGreaterThanOrEqual(0);
     expect(body.data.parsed.confidence).toBeLessThanOrEqual(1);
     // Amount, if present, should be non-negative.

tests/e2e/realapi/smtp-system-send.spec.ts

@@ -13,8 +13,8 @@ import { login, apiHeaders } from '../smoke/helpers';
  * and verifies the attachment bytes round-trip end-to-end.
  *
  * Requires:
- *   SMTP_HOST / SMTP_PORT / SMTP_USER / SMTP_PASS — outbound transport
- *   IMAP_HOST / IMAP_PORT / IMAP_USER / IMAP_PASS — inbound for verification
+ *   SMTP_HOST / SMTP_PORT / SMTP_USER / SMTP_PASS - outbound transport
+ *   IMAP_HOST / IMAP_PORT / IMAP_USER / IMAP_PASS - inbound for verification
  */
 
 const SMTP_HOST = process.env.SMTP_HOST;