chore(autonomous-session): consolidate uncommitted work from prior session

Bundles the prior autonomous-session output that was sitting unstaged:

- Em-dash sweep across src/ + tests/ (en-dash/em-dash to hyphen, ~2280 instances)
- country-flag-icons rollout (CountryFlag component, replaces emoji glyphs that
  never rendered on Windows; lazy-loads the 3x2 SVG index as a single chunk
  after the per-subpath dynamic-import approach silently failed in webpack)
- Admin IA Phase 1+2: 7-domain regroup, 41 to 38 pages, /admin/berths index,
  redirects (ocr to ai, reports to dashboard, invitations to users),
  docs/admin-ia-proposal.md
- Per-template email tester (registry + endpoint + UI on Email admin page)
- Cancel-document mode picker (delete-from-Documenso vs keep-for-audit)
- Dashboard PDF report: 25 widgets, SVG charts, date-range picker, 11 resolvers
- Customize-widgets per-region sortables at xl+ (charts/rails/feed); single
  flat sortable below xl when the layout stacks; per-viewport saved orders
- Audit doc updates capturing each shipped item
- Lint fixes: react-compiler immutability in DonutChart (reduce instead of
  let-reassign), set-state-in-effect disables in CountryFlag and
  UploadForSigning preview-bytes effect, unused 'confirm' destructures in
  interest contract + reservation tabs, unescaped apostrophe in test-template
  card copy

tests/unit/document-folders-system-folders.test.ts

@@ -1,9 +1,9 @@
 /**
- * Task 2 — ensureSystemRoots (TDD).
- * Task 3 — ensureEntityFolder (TDD).
+ * Task 2 - ensureSystemRoots (TDD).
+ * Task 3 - ensureEntityFolder (TDD).
  *
  * Fixture convention: makePort from helpers/factories (async DB insert);
- * TEST_USER_ID resolved once via beforeAll from a seeded user — same pattern
+ * TEST_USER_ID resolved once via beforeAll from a seeded user - same pattern
  * as document-folders-crud.test.ts and alerts-tenant-isolation.test.ts.
  */
 
@@ -48,7 +48,7 @@ describe('document-folders service · ensureSystemRoots', () => {
     }
   });
 
-  it('is idempotent — second call does not create duplicates', async () => {
+  it('is idempotent - second call does not create duplicates', async () => {
     await ensureSystemRoots(portId, TEST_USER_ID);
     await ensureSystemRoots(portId, TEST_USER_ID);
     const rows = await db
@@ -97,7 +97,7 @@ describe('document-folders service · ensureEntityFolder', () => {
     expect(folder.name).toBe(row!.fullName);
   });
 
-  it('is idempotent — returns the same row on second call', async () => {
+  it('is idempotent - returns the same row on second call', async () => {
     const a = await ensureEntityFolder(portId, 'client', clientId, TEST_USER_ID);
     const b = await ensureEntityFolder(portId, 'client', clientId, TEST_USER_ID);
     expect(a.id).toBe(b.id);
@@ -282,7 +282,7 @@ describe('document-folders service · archive lifecycle', () => {
     expect(folder?.systemManaged).toBe(true);
   });
 
-  it('is idempotent on archive — second call does not double-append', async () => {
+  it('is idempotent on archive - second call does not double-append', async () => {
     await applyEntityArchivedSuffix(portId, 'client', clientId);
     await applyEntityArchivedSuffix(portId, 'client', clientId);
     const folder = await db.query.documentFolders.findFirst({