Guard destructive settings and radio actions

- Route reset campaign and tutorial replay through one reusable confirmation dialog; repeated presses cannot stack or emit twice.
- Keep emergency hold-to-send single-shot and cover the post-submit release.
- Add destructive-action regression checks, strings and documentation.

CHANGELOG.md

@@ -20,6 +20,9 @@ Semantic Versioning.
 - The HUD target chip grows and caps with the selected font scale, top labels
   clip safely, and long action-button labels ellipsize instead of pushing panels
   wider than the screen.
+- Campaign reset and tutorial replay now share a guarded confirmation dialog;
+  repeated presses cannot stack dialogs or fire the action twice. Emergency
+  hold-to-send still submits once and ignores the release after submission.
 - NPC reason answers now use role-specific dialogue contexts, so staff, guests,
   delivery workers, performers and other archetypes answer instead of silently
   deflecting the Reason verb.