对接皮肤源头开放接口：查询、发货推送与 HMAC 签名鉴权

- 新增订单查询与发货结果推送开放接口，支持 can_ship 与幂等
- 鉴权采用 X-Api-Key + Timestamp + Nonce + HMAC-SHA256 签名
- 订单扩展发货字段与 ship_logs，管理端增加发货记录与开放文档页

frontend/src/api/index.ts

@@ -4,6 +4,7 @@ import type {
   LoginResult,
   Order,
   PageResult,
+  ShipLog,
   Skin,
   User,
 } from '../types'
@@ -58,3 +59,8 @@ export const userApi = {
   updateStatus: (id: number, status: number) =>
     request.patch(`/users/${id}/status`, { status }).then((r) => r.data.data),
 }
+
+export const shipLogApi = {
+  list: (params?: Record<string, unknown>) =>
+    request.get('/ship-logs', { params }).then((r) => r.data.data as PageResult<ShipLog>),
+}