chore(autonomous-session): consolidate uncommitted work from prior session

Bundles the prior autonomous-session output that was sitting unstaged:

- Em-dash sweep across src/ + tests/ (en-dash/em-dash to hyphen, ~2280 instances)
- country-flag-icons rollout (CountryFlag component, replaces emoji glyphs that
  never rendered on Windows; lazy-loads the 3x2 SVG index as a single chunk
  after the per-subpath dynamic-import approach silently failed in webpack)
- Admin IA Phase 1+2: 7-domain regroup, 41 to 38 pages, /admin/berths index,
  redirects (ocr to ai, reports to dashboard, invitations to users),
  docs/admin-ia-proposal.md
- Per-template email tester (registry + endpoint + UI on Email admin page)
- Cancel-document mode picker (delete-from-Documenso vs keep-for-audit)
- Dashboard PDF report: 25 widgets, SVG charts, date-range picker, 11 resolvers
- Customize-widgets per-region sortables at xl+ (charts/rails/feed); single
  flat sortable below xl when the layout stacks; per-viewport saved orders
- Audit doc updates capturing each shipped item
- Lint fixes: react-compiler immutability in DonutChart (reduce instead of
  let-reassign), set-state-in-effect disables in CountryFlag and
  UploadForSigning preview-bytes effect, unused 'confirm' destructures in
  interest contract + reservation tabs, unescaped apostrophe in test-template
  card copy

tests/unit/hooks/realtime-invalidation.test.ts

@@ -10,7 +10,7 @@ import {
 /**
  * Pure-logic tests for the realtime-invalidation subscription helper. The
  * React hook (`useRealtimeInvalidation`) is just a thin wrapper around this
- * function — verifying the handler-registration / fire-time-lookup behavior
+ * function - verifying the handler-registration / fire-time-lookup behavior
  * here is sufficient to lock in the bug fixes:
  *   1. Re-subscribe storm (caller passing inline literals)
  *   2. Fresh queryKeys read at fire-time
@@ -129,7 +129,7 @@ describe('subscribeRealtimeInvalidations', () => {
     cleanup();
 
     expect(offCalls.map((c) => c.event).sort()).toEqual(['a:event', 'b:event']);
-    // All listeners removed — emitting after cleanup invalidates nothing.
+    // All listeners removed - emitting after cleanup invalidates nothing.
     emit('a:event');
     emit('b:event');
     expect(calls).toEqual([]);
@@ -150,7 +150,7 @@ describe('subscribeRealtimeInvalidations', () => {
     };
     subscribeRealtimeInvalidations(socket, ['client:updated'], queryClient, () => currentMap);
 
-    // Wipe the entry — handler will fire but find nothing to invalidate.
+    // Wipe the entry - handler will fire but find nothing to invalidate.
     currentMap = {};
     expect(() => emit('client:updated')).not.toThrow();
     expect(calls).toEqual([]);