fix: replace all native confirm() dialogs with styled modal macros

Migrated ~68 native browser confirm() calls across 74 files to use the
project's confirm_modal/confirm_modal_dynamic Jinja2 macros, providing
consistent styled confirmation dialogs instead of plain browser popups.

Modules updated: core, tenancy, cms, marketplace, messaging, billing,
customers, orders, cart. Uses danger/warning/info variants and
double-confirm pattern for destructive delete operations.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

app/modules/tenancy/static/admin/js/user-edit.js

@@ -17,6 +17,9 @@ function adminUserEdit() {
         loadingUser: false,
         saving: false,
         userId: null,
+        showToggleStatusModal: false,
+        showDeleteModal: false,
+        showDeleteFinalModal: false,
 
         // Initialize
         async init() {
@@ -154,11 +157,6 @@ function adminUserEdit() {
             const action = this.user.is_active ? 'deactivate' : 'activate';
             userEditLog.info(`Toggle status: ${action}`);
 
-            if (!confirm(`Are you sure you want to ${action} ${this.user.username}?`)) {
-                userEditLog.info('Status toggle cancelled by user');
-                return;
-            }
-
             this.saving = true;
             try {
                 const url = `/admin/users/${this.userId}/status`;
@@ -180,6 +178,12 @@ function adminUserEdit() {
             }
         },
 
+        // Intermediate step for double-confirm delete
+        confirmDeleteStep() {
+            userEditLog.info('First delete confirmation accepted, showing final confirmation');
+            this.showDeleteFinalModal = true;
+        },
+
         // Delete user
         async deleteUser() {
             userEditLog.info('=== DELETING USER ===');
@@ -189,17 +193,6 @@ function adminUserEdit() {
                 return;
             }
 
-            if (!confirm(`Are you sure you want to delete user "${this.user.username}"?\n\nThis action cannot be undone.`)) {
-                userEditLog.info('User deletion cancelled by user');
-                return;
-            }
-
-            // Double confirmation for critical action
-            if (!confirm(`FINAL CONFIRMATION: Delete "${this.user.username}"?\n\nThis will permanently delete the user.`)) {
-                userEditLog.info('User deletion cancelled at final confirmation');
-                return;
-            }
-
             this.saving = true;
             try {
                 const url = `/admin/users/${this.userId}`;