对接皮肤源头开放接口：查询、发货推送与 HMAC 签名鉴权

- 新增订单查询与发货结果推送开放接口，支持 can_ship 与幂等
- 鉴权采用 X-Api-Key + Timestamp + Nonce + HMAC-SHA256 签名
- 订单扩展发货字段与 ship_logs，管理端增加发货记录与开放文档页

frontend/src/App.tsx

@@ -9,6 +9,8 @@ import Dashboard from './pages/Dashboard'
 import Skins from './pages/Skins'
 import Orders from './pages/Orders'
 import Distributors from './pages/Distributors'
+import ShipLogs from './pages/ShipLogs'
+import OpenApiDocs from './pages/OpenApiDocs'
 import type { ReactNode } from 'react'
 
 function PrivateRoute({ children }: { children: ReactNode }) {
@@ -47,6 +49,22 @@ function AppRoutes() {
             </AdminRoute>
           }
         />
+        <Route
+          path="ship-logs"
+          element={
+            <AdminRoute>
+              <ShipLogs />
+            </AdminRoute>
+          }
+        />
+        <Route
+          path="open-api"
+          element={
+            <AdminRoute>
+              <OpenApiDocs />
+            </AdminRoute>
+          }
+        />
       </Route>
       <Route path="*" element={<Navigate to="/" replace />} />
     </Routes>