fix(ui): migrate remaining native confirm() calls to DestructiveConfirmDialog (#1046)

Migrates the three remaining bare confirm() sites from issue #1038 to the
imperative useDestructiveConfirm() pattern already mounted on both pages:
resume-autosend and run-now on the recurring-invoices page, and unapprove
on the salary-run page (its dynamically assembled multi-line copy now
renders as paragraphs via whitespace-pre-line on DialogDescription).

Also adds a togglingId in-flight guard to togglePause, mirroring the
deletingId/runningId guards from PR #1036, so the pause/resume button
cannot fire a duplicate PATCH while one is pending.

Fixes #1038

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

components/ui/destructive-confirm-dialog.tsx

@@ -69,7 +69,12 @@ export function DestructiveConfirmDialog({
             </div>
             <div className="space-y-1">
               <DialogTitle>{title}</DialogTitle>
-              <DialogDescription>{description}</DialogDescription>
+              {/* pre-line so callers can pass newline-separated paragraphs
+                  (e.g. the salary unapprove confirm assembles its copy
+                  dynamically); single-line descriptions render unchanged. */}
+              <DialogDescription className="whitespace-pre-line">
+                {description}
+              </DialogDescription>
             </div>
           </div>
         </DialogHeader>