chore(autonomous-session): consolidate uncommitted work from prior session

Bundles the prior autonomous-session output that was sitting unstaged:

- Em-dash sweep across src/ + tests/ (en-dash/em-dash to hyphen, ~2280 instances)
- country-flag-icons rollout (CountryFlag component, replaces emoji glyphs that
  never rendered on Windows; lazy-loads the 3x2 SVG index as a single chunk
  after the per-subpath dynamic-import approach silently failed in webpack)
- Admin IA Phase 1+2: 7-domain regroup, 41 to 38 pages, /admin/berths index,
  redirects (ocr to ai, reports to dashboard, invitations to users),
  docs/admin-ia-proposal.md
- Per-template email tester (registry + endpoint + UI on Email admin page)
- Cancel-document mode picker (delete-from-Documenso vs keep-for-audit)
- Dashboard PDF report: 25 widgets, SVG charts, date-range picker, 11 resolvers
- Customize-widgets per-region sortables at xl+ (charts/rails/feed); single
  flat sortable below xl when the layout stacks; per-viewport saved orders
- Audit doc updates capturing each shipped item
- Lint fixes: react-compiler immutability in DonutChart (reduce instead of
  let-reassign), set-state-in-effect disables in CountryFlag and
  UploadForSigning preview-bytes effect, unused 'confirm' destructures in
  interest contract + reservation tabs, unescaped apostrophe in test-template
  card copy

tests/unit/document-folders-regression.test.ts

@@ -6,7 +6,7 @@
  *   - `applyEntityRestoredSuffix` no-op when the folder was never archived
  *     (must not flip archived_at, must not rename anything, must not emit
  *     an audit log).
- *   - `syncEntityFolderName` collision loop past `(2)` — proves the suffix
+ *   - `syncEntityFolderName` collision loop past `(2)` - proves the suffix
  *     loop iterates correctly when the first numbered candidate is also
  *     taken. Existing coverage only asserted the `(2)` case.
  *
@@ -14,7 +14,7 @@
  * `partially_signed → 'partial'` mapping, but that helper currently lives
  * inside React component files (`entity-folder-view.tsx`,
  * `signing-details-dialog.tsx`, `documents-hub.tsx`) and is not exported.
- * A real unit test would require extracting it to a shared util — out of
+ * A real unit test would require extracting it to a shared util - out of
  * scope for this subagent's file ownership. See the audit report for the
  * deferred fix.
  */
@@ -73,13 +73,13 @@ describe('document-folders · applyEntityRestoredSuffix no-op (regression)', ()
     });
     expect(after?.name).toBe(originalName);
     expect(after?.archivedAt).toBeNull();
-    // updatedAt should not advance on a no-op restore — the row write is
+    // updatedAt should not advance on a no-op restore - the row write is
     // skipped entirely.
     expect(after?.updatedAt?.getTime()).toBe(before?.updatedAt?.getTime());
   });
 
   it('is a no-op when called for an entity whose folder does not exist (lazy creation)', async () => {
-    // Different port — no folder for this client.
+    // Different port - no folder for this client.
     const otherPort = await makePort();
     await ensureSystemRoots(otherPort.id, TEST_USER_ID);
     const [other] = await db
@@ -117,7 +117,7 @@ describe('document-folders · syncEntityFolderName collision loop > (2) (regress
   });
 
   it('walks past (2) → (3) when the (2) suffix is also taken', async () => {
-    // Three clients with the same name — first two are pre-created with their
+    // Three clients with the same name - first two are pre-created with their
     // entity folders so `sharedName` and `sharedName (2)` are both occupied
     // before we trigger the rename on the third.
     const sharedName = `Triple Collision ${crypto.randomUUID().slice(0, 6)}`;
@@ -127,10 +127,10 @@ describe('document-folders · syncEntityFolderName collision loop > (2) (regress
 
     const [second] = await db.insert(clients).values({ portId, fullName: sharedName }).returning();
     const secondFolder = await ensureEntityFolder(portId, 'client', second!.id, TEST_USER_ID);
-    // Sanity — second client's folder is the "(2)" variant.
+    // Sanity - second client's folder is the "(2)" variant.
     expect(secondFolder.name).toBe(`${sharedName} (2)`);
 
-    // Third client — start with a different name so its folder is unique,
+    // Third client - start with a different name so its folder is unique,
     // then rename it to the shared name to force `syncEntityFolderName` to
     // walk past (2).
     const placeholderName = `Triple Collision Placeholder ${crypto.randomUUID().slice(0, 6)}`;