chore(autonomous-session): consolidate uncommitted work from prior session

Bundles the prior autonomous-session output that was sitting unstaged:

- Em-dash sweep across src/ + tests/ (en-dash/em-dash to hyphen, ~2280 instances)
- country-flag-icons rollout (CountryFlag component, replaces emoji glyphs that
  never rendered on Windows; lazy-loads the 3x2 SVG index as a single chunk
  after the per-subpath dynamic-import approach silently failed in webpack)
- Admin IA Phase 1+2: 7-domain regroup, 41 to 38 pages, /admin/berths index,
  redirects (ocr to ai, reports to dashboard, invitations to users),
  docs/admin-ia-proposal.md
- Per-template email tester (registry + endpoint + UI on Email admin page)
- Cancel-document mode picker (delete-from-Documenso vs keep-for-audit)
- Dashboard PDF report: 25 widgets, SVG charts, date-range picker, 11 resolvers
- Customize-widgets per-region sortables at xl+ (charts/rails/feed); single
  flat sortable below xl when the layout stacks; per-viewport saved orders
- Audit doc updates capturing each shipped item
- Lint fixes: react-compiler immutability in DonutChart (reduce instead of
  let-reassign), set-state-in-effect disables in CountryFlag and
  UploadForSigning preview-bytes effect, unused 'confirm' destructures in
  interest contract + reservation tabs, unescaped apostrophe in test-template
  card copy

tests/integration/berth-pdf-versions.test.ts

@@ -43,7 +43,7 @@ beforeEach(async () => {
 });
 
 afterEach(async () => {
-  // No file cleanup needed — the filesystem backend writes to a tmp root.
+  // No file cleanup needed - the filesystem backend writes to a tmp root.
 });
 
 function fakePdf(): Buffer {
@@ -240,7 +240,7 @@ describe('applyParseResults', () => {
         lengthFt: 200,
         bowFacing: 'East',
         // unknown / non-allowlisted column should be silently dropped:
-        // @ts-expect-error — testing the allowlist
+        // @ts-expect-error - testing the allowlist
         hackThePlanet: 'pwn',
       },
       port.id,
@@ -323,7 +323,7 @@ describe('cross-port tenant guard', () => {
     });
 
     // Port B caller passing port A's berth id must hit NotFoundError on
-    // every entrypoint — including read-only listing, which previously
+    // every entrypoint - including read-only listing, which previously
     // returned 15-min presigned download URLs to the foreign port's PDFs.
     await expect(listBerthPdfVersions(berthA.id, portB.id)).rejects.toThrow(/berth/i);
     await expect(rollbackToVersion(berthA.id, v1.versionId, portB.id)).rejects.toThrow(/berth/i);