对接皮肤源头开放接口：查询、发货推送与 HMAC 签名鉴权

- 新增订单查询与发货结果推送开放接口，支持 can_ship 与幂等
- 鉴权采用 X-Api-Key + Timestamp + Nonce + HMAC-SHA256 签名
- 订单扩展发货字段与 ship_logs，管理端增加发货记录与开放文档页

frontend/src/layouts/MainLayout.tsx

@@ -18,6 +18,8 @@ import {
   LogoutOutlined,
   MenuFoldOutlined,
   MenuUnfoldOutlined,
+  SendOutlined,
+  ApiOutlined,
 } from '@ant-design/icons'
 import { useAuth } from '../store/auth'
 import type { MenuProps } from 'antd'
@@ -40,7 +42,11 @@ export default function MainLayout() {
       { key: '/orders', icon: <ShoppingOutlined />, label: '订单管理' },
     ]
     if (isAdmin) {
-      items.push({ key: '/distributors', icon: <TeamOutlined />, label: '分销商' })
+      items.push(
+        { key: '/distributors', icon: <TeamOutlined />, label: '分销商' },
+        { key: '/ship-logs', icon: <SendOutlined />, label: '发货记录' },
+        { key: '/open-api', icon: <ApiOutlined />, label: '开放接口' },
+      )
     }
     return items
   }, [isAdmin])