chore(autonomous-session): consolidate uncommitted work from prior session

Bundles the prior autonomous-session output that was sitting unstaged:

- Em-dash sweep across src/ + tests/ (en-dash/em-dash to hyphen, ~2280 instances)
- country-flag-icons rollout (CountryFlag component, replaces emoji glyphs that
  never rendered on Windows; lazy-loads the 3x2 SVG index as a single chunk
  after the per-subpath dynamic-import approach silently failed in webpack)
- Admin IA Phase 1+2: 7-domain regroup, 41 to 38 pages, /admin/berths index,
  redirects (ocr to ai, reports to dashboard, invitations to users),
  docs/admin-ia-proposal.md
- Per-template email tester (registry + endpoint + UI on Email admin page)
- Cancel-document mode picker (delete-from-Documenso vs keep-for-audit)
- Dashboard PDF report: 25 widgets, SVG charts, date-range picker, 11 resolvers
- Customize-widgets per-region sortables at xl+ (charts/rails/feed); single
  flat sortable below xl when the layout stacks; per-viewport saved orders
- Audit doc updates capturing each shipped item
- Lint fixes: react-compiler immutability in DonutChart (reduce instead of
  let-reassign), set-state-in-effect disables in CountryFlag and
  UploadForSigning preview-bytes effect, unused 'confirm' destructures in
  interest contract + reservation tabs, unescaped apostrophe in test-template
  card copy

tests/unit/services/document-signing-urls.test.ts

@@ -3,13 +3,13 @@ import { describe, it, expect } from 'vitest';
 import { transformSigningUrl } from '@/lib/services/document-signing-emails.service';
 
 /**
- * Phase 5 — pin the URL-wrapping contract.
+ * Phase 5 - pin the URL-wrapping contract.
  *
  * The marketing website at portnimara.com/sign/[type]/[token] expects
  * specific path segments (`client | cc | developer | witness`) and the
  * Documenso webhook returns raw URLs of the form
  * `https://signatures.portnimara.com/sign/<token>`. transformSigningUrl
- * is the seam between the two — these tests guard the role-to-URL-
+ * is the seam between the two - these tests guard the role-to-URL-
  * segment mapping so a future refactor can't silently break the
  * embedded signing pages.
  */
@@ -38,7 +38,7 @@ describe('transformSigningUrl', () => {
     );
   });
 
-  it('maps approver → /sign/cc/<token> — website only handles {client, cc, developer, witness}', () => {
+  it('maps approver → /sign/cc/<token> - website only handles {client, cc, developer, witness}', () => {
     expect(transformSigningUrl(RAW, HOST, 'approver')).toBe(
       'https://portnimara.com/sign/cc/vbT8hi3jKQmrFP_LN1WcS',
     );
@@ -50,7 +50,7 @@ describe('transformSigningUrl', () => {
     );
   });
 
-  it('maps other → /sign/cc/<token> — funnels through CC page with passive copy', () => {
+  it('maps other → /sign/cc/<token> - funnels through CC page with passive copy', () => {
     expect(transformSigningUrl(RAW, HOST, 'other')).toBe(
       'https://portnimara.com/sign/cc/vbT8hi3jKQmrFP_LN1WcS',
     );
@@ -65,7 +65,7 @@ describe('transformSigningUrl', () => {
     );
   });
 
-  it('preserves the token verbatim — no URL encoding / re-shaping', () => {
+  it('preserves the token verbatim - no URL encoding / re-shaping', () => {
     const odd = 'https://sig.example.com/sign/Aa_-Zz09_-XYZ';
     expect(transformSigningUrl(odd, HOST, 'developer')).toBe(
       'https://portnimara.com/sign/developer/Aa_-Zz09_-XYZ',