chore(style): codebase em-dash sweep + minor layout polish

Replaces every em-dash and en-dash with regular ASCII hyphens
across comments, JSX strings, and dev-facing logs. Mostly cosmetic
but stops the inconsistent mix that crept in over the last few
months (some files used em-dashes in comments, others didn't,
some used both).

Bundles two small dashboard-layout tweaks that touch a couple of
already-modified files:
- (dashboard)/layout.tsx main padding goes from p-6 to pt-3 px-6
  pb-6 so page content sits closer to the topbar.
- Sidebar now receives the ports list it needs for the footer
  port switcher.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

src/lib/services/portal-auth.service.ts

@@ -108,7 +108,7 @@ async function issueActivationToken(
     await sendEmail(email, subject, html, undefined, text);
   } catch (err) {
     logger.error({ err, email }, 'Failed to send portal activation email');
-    // Re-throw — the admin should know if their invite mail bounced.
+    // Re-throw - the admin should know if their invite mail bounced.
     throw err;
   }
 }
@@ -162,7 +162,7 @@ export async function signIn(args: {
     where: eq(portalUsers.email, normalizedEmail),
   });
 
-  // Dummy hash with the right shape — used to keep verifyPassword's compute
+  // Dummy hash with the right shape - used to keep verifyPassword's compute
   // cost identical when the user doesn't exist.
   const dummyHash =
     '0000000000000000000000000000000000000000000000000000000000000000:00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000';
@@ -177,7 +177,7 @@ export async function signIn(args: {
 
   // Disabled-port check happens AFTER the credential check so that a wrong
   // password on a disabled-port account still surfaces "invalid email or
-  // password" — we never leak which ports have the portal turned off.
+  // password" - we never leak which ports have the portal turned off.
   if (!(await isPortalEnabledForPort(user.portId))) {
     throw new UnauthorizedError('Invalid email or password');
   }
@@ -209,7 +209,7 @@ export async function requestPasswordReset(email: string): Promise<void> {
     return;
   }
 
-  // Same silent no-op when the port has the portal disabled — keeps the
+  // Same silent no-op when the port has the portal disabled - keeps the
   // disabled-state from leaking through the public reset endpoint.
   if (!(await isPortalEnabledForPort(user.portId))) {
     logger.debug({ portId: user.portId }, 'Password reset on disabled-portal port');
@@ -239,7 +239,7 @@ export async function requestPasswordReset(email: string): Promise<void> {
     await sendEmail(user.email, subject, html, undefined, text);
   } catch (err) {
     logger.error({ err, email: user.email }, 'Failed to send password-reset email');
-    // Don't propagate — the public route returns 200 either way.
+    // Don't propagate - the public route returns 200 either way.
   }
 }