fix: replace all native confirm() dialogs with styled modal macros

Migrated ~68 native browser confirm() calls across 74 files to use the
project's confirm_modal/confirm_modal_dynamic Jinja2 macros, providing
consistent styled confirmation dialogs instead of plain browser popups.

Modules updated: core, tenancy, cms, marketplace, messaging, billing,
customers, orders, cart. Uses danger/warning/info variants and
double-confirm pattern for destructive delete operations.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

app/modules/tenancy/static/admin/js/merchant-users.js

@@ -16,6 +16,11 @@ function merchantUsersPage() {
         merchantUsers: [],
         loading: false,
         error: null,
+        showToggleStatusModal: false,
+        showDeleteModal: false,
+        showDeleteFinalModal: false,
+        userToToggle: null,
+        userToDelete: null,
         filters: {
             search: '',
             is_active: ''
@@ -230,11 +235,6 @@ function merchantUsersPage() {
             const action = user.is_active ? 'deactivate' : 'activate';
             merchantUsersLog.info(`Toggle status: ${action} for user`, user.username);
 
-            if (!confirm(`Are you sure you want to ${action} "${user.full_name || user.username || user.email}"?`)) {
-                merchantUsersLog.info('Status toggle cancelled by user');
-                return;
-            }
-
             try {
                 const url = `/admin/users/${user.id}/status`;
                 window.LogConfig.logApiCall('PUT', url, null, 'request');
@@ -254,21 +254,16 @@ function merchantUsersPage() {
             }
         },
 
+        // Intermediate step for double-confirm delete
+        confirmDeleteStep() {
+            merchantUsersLog.info('First delete confirmation accepted, showing final confirmation');
+            this.showDeleteFinalModal = true;
+        },
+
         // Delete user
         async deleteUser(user) {
             merchantUsersLog.warn('Delete user requested:', user.username);
 
-            if (!confirm(`Are you sure you want to delete "${user.full_name || user.username || user.email}"?\n\nThis action cannot be undone.`)) {
-                merchantUsersLog.info('Delete cancelled by user');
-                return;
-            }
-
-            // Second confirmation for safety
-            if (!confirm(`FINAL CONFIRMATION\n\nAre you absolutely sure you want to delete "${user.full_name || user.username || user.email}"?`)) {
-                merchantUsersLog.info('Delete cancelled by user (second confirmation)');
-                return;
-            }
-
             try {
                 const url = `/admin/users/${user.id}`;
                 window.LogConfig.logApiCall('DELETE', url, null, 'request');