chore(autonomous-session): consolidate uncommitted work from prior session

Bundles the prior autonomous-session output that was sitting unstaged:

- Em-dash sweep across src/ + tests/ (en-dash/em-dash to hyphen, ~2280 instances)
- country-flag-icons rollout (CountryFlag component, replaces emoji glyphs that
  never rendered on Windows; lazy-loads the 3x2 SVG index as a single chunk
  after the per-subpath dynamic-import approach silently failed in webpack)
- Admin IA Phase 1+2: 7-domain regroup, 41 to 38 pages, /admin/berths index,
  redirects (ocr to ai, reports to dashboard, invitations to users),
  docs/admin-ia-proposal.md
- Per-template email tester (registry + endpoint + UI on Email admin page)
- Cancel-document mode picker (delete-from-Documenso vs keep-for-audit)
- Dashboard PDF report: 25 widgets, SVG charts, date-range picker, 11 resolvers
- Customize-widgets per-region sortables at xl+ (charts/rails/feed); single
  flat sortable below xl when the layout stacks; per-viewport saved orders
- Audit doc updates capturing each shipped item
- Lint fixes: react-compiler immutability in DonutChart (reduce instead of
  let-reassign), set-state-in-effect disables in CountryFlag and
  UploadForSigning preview-bytes effect, unused 'confirm' destructures in
  interest contract + reservation tabs, unescaped apostrophe in test-template
  card copy

tests/e2e/realapi/portal-imap-activation.spec.ts

@@ -22,7 +22,7 @@ import { login, apiHeaders } from '../smoke/helpers';
  * routes back to the same inbox via standard +addressing.
  *
  * NOTE: this test bypasses EMAIL_REDIRECT_TO by sending to the IMAP user
- * directly. If EMAIL_REDIRECT_TO is set, the redirect still applies — but
+ * directly. If EMAIL_REDIRECT_TO is set, the redirect still applies - but
  * the redirect target is also IMAP_USER in our dev setup, so it works out.
  */
 
@@ -129,7 +129,7 @@ test.describe('Portal activation: SMTP + IMAP round-trip', () => {
     expect(inviteRes.ok(), `invite: ${inviteRes.status()} ${await inviteRes.text()}`).toBe(true);
 
     // ─── 3-4. Poll IMAP and extract the activation token ─────────────────────
-    // Match on the +addressed recipient — that's what's preserved in the TO
+    // Match on the +addressed recipient - that's what's preserved in the TO
     // header even after the mailserver delivers it back to IMAP_USER's inbox.
     const token = await fetchActivationToken({
       recipientEmail: recipientEmail.toLowerCase(),