chore(autonomous-session): consolidate uncommitted work from prior session

Bundles the prior autonomous-session output that was sitting unstaged:

- Em-dash sweep across src/ + tests/ (en-dash/em-dash to hyphen, ~2280 instances)
- country-flag-icons rollout (CountryFlag component, replaces emoji glyphs that
  never rendered on Windows; lazy-loads the 3x2 SVG index as a single chunk
  after the per-subpath dynamic-import approach silently failed in webpack)
- Admin IA Phase 1+2: 7-domain regroup, 41 to 38 pages, /admin/berths index,
  redirects (ocr to ai, reports to dashboard, invitations to users),
  docs/admin-ia-proposal.md
- Per-template email tester (registry + endpoint + UI on Email admin page)
- Cancel-document mode picker (delete-from-Documenso vs keep-for-audit)
- Dashboard PDF report: 25 widgets, SVG charts, date-range picker, 11 resolvers
- Customize-widgets per-region sortables at xl+ (charts/rails/feed); single
  flat sortable below xl when the layout stacks; per-viewport saved orders
- Audit doc updates capturing each shipped item
- Lint fixes: react-compiler immutability in DonutChart (reduce instead of
  let-reassign), set-state-in-effect disables in CountryFlag and
  UploadForSigning preview-bytes effect, unused 'confirm' destructures in
  interest contract + reservation tabs, unescaped apostrophe in test-template
  card copy

tests/integration/documents-expired-webhook.test.ts

@@ -1,5 +1,5 @@
 /**
- * DOCUMENT_EXPIRED webhook handling — locks in fix(documenso). The handler
+ * DOCUMENT_EXPIRED webhook handling - locks in fix(documenso). The handler
  * was previously defined but never wired to the route's event switch, so
  * expired EOIs stayed in `sent` / `partially_signed` forever.
  */
@@ -88,7 +88,7 @@ describe('handleDocumentExpired', () => {
   });
 
   it('is a no-op when the documensoId does not match any document', async () => {
-    // Should NOT throw — the handler logs a warning and returns. Verify no
+    // Should NOT throw - the handler logs a warning and returns. Verify no
     // exception propagates up to the webhook route.
     await expect(
       handleDocumentExpired({ documentId: 'definitely-not-a-real-doc' }),
@@ -98,7 +98,7 @@ describe('handleDocumentExpired', () => {
   it('does not flip a document in port B when port A receives the expired event', async () => {
     // Two ports holding the same documenso_id (legacy data, or a future
     // Documenso-instance migration that reuses ids). The handler currently
-    // mutates whichever document `findFirst` returns — locking in the
+    // mutates whichever document `findFirst` returns - locking in the
     // intended behaviour now means a future port_id-aware handler can
     // be added without regressing this guard.
     //
@@ -140,7 +140,7 @@ describe('handleDocumentExpired', () => {
     // resolve this from the secret → port mapping in the deferred fix).
     await handleDocumentExpired({ documentId: sharedDocumensoId, portId: portA.id });
 
-    // Port-A doc flipped, port-B unchanged. Pre-fix, both flip — this
+    // Port-A doc flipped, port-B unchanged. Pre-fix, both flip - this
     // assertion locks the boundary in once the handler scope lands.
     const afterA = await db.query.documents.findFirst({ where: eq(documents.id, docA!.id) });
     const afterB = await db.query.documents.findFirst({ where: eq(documents.id, docB!.id) });