feat: add admin orders management

- Add admin API endpoints for order management
- Add orders page with vendor selector and filtering
- Add order schemas for admin operations
- Support order status tracking and management

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

app/api/v1/admin/orders.py

@@ -0,0 +1,138 @@
+# app/api/v1/admin/orders.py
+"""
+Admin order management endpoints.
+
+Provides order management capabilities for administrators:
+- View orders across all vendors
+- View vendor-specific orders
+- Update order status on behalf of vendors
+- Order statistics and reporting
+
+Admin Context: Uses admin JWT authentication.
+Vendor selection is passed as a request parameter.
+"""
+
+import logging
+
+from fastapi import APIRouter, Depends, Query
+from sqlalchemy.orm import Session
+
+from app.api.deps import get_current_admin_api
+from app.core.database import get_db
+from app.services.order_service import order_service
+from models.database.user import User
+from models.schema.order import (
+    AdminOrderItem,
+    AdminOrderListResponse,
+    AdminOrderStats,
+    AdminOrderStatusUpdate,
+    AdminVendorsWithOrdersResponse,
+    OrderDetailResponse,
+)
+
+router = APIRouter(prefix="/orders")
+logger = logging.getLogger(__name__)
+
+
+# ============================================================================
+# List & Statistics Endpoints
+# ============================================================================
+
+
+@router.get("", response_model=AdminOrderListResponse)
+def get_all_orders(
+    skip: int = Query(0, ge=0),
+    limit: int = Query(50, ge=1, le=500),
+    vendor_id: int | None = Query(None, description="Filter by vendor"),
+    status: str | None = Query(None, description="Filter by status"),
+    channel: str | None = Query(None, description="Filter by channel"),
+    search: str | None = Query(None, description="Search by order number or customer"),
+    db: Session = Depends(get_db),
+    current_admin: User = Depends(get_current_admin_api),
+):
+    """
+    Get orders across all vendors with filtering.
+
+    Allows admins to view and filter orders across the platform.
+    """
+    orders, total = order_service.get_all_orders_admin(
+        db=db,
+        skip=skip,
+        limit=limit,
+        vendor_id=vendor_id,
+        status=status,
+        channel=channel,
+        search=search,
+    )
+
+    return AdminOrderListResponse(
+        orders=[AdminOrderItem(**order) for order in orders],
+        total=total,
+        skip=skip,
+        limit=limit,
+    )
+
+
+@router.get("/stats", response_model=AdminOrderStats)
+def get_order_stats(
+    db: Session = Depends(get_db),
+    current_admin: User = Depends(get_current_admin_api),
+):
+    """Get platform-wide order statistics."""
+    return order_service.get_order_stats_admin(db)
+
+
+@router.get("/vendors", response_model=AdminVendorsWithOrdersResponse)
+def get_vendors_with_orders(
+    db: Session = Depends(get_db),
+    current_admin: User = Depends(get_current_admin_api),
+):
+    """Get list of vendors that have orders."""
+    vendors = order_service.get_vendors_with_orders_admin(db)
+    return AdminVendorsWithOrdersResponse(vendors=vendors)
+
+
+# ============================================================================
+# Order Detail & Update Endpoints
+# ============================================================================
+
+
+@router.get("/{order_id}", response_model=OrderDetailResponse)
+def get_order_detail(
+    order_id: int,
+    db: Session = Depends(get_db),
+    current_admin: User = Depends(get_current_admin_api),
+):
+    """Get order details including items and addresses."""
+    order = order_service.get_order_by_id_admin(db, order_id)
+    return order
+
+
+@router.patch("/{order_id}/status", response_model=OrderDetailResponse)
+def update_order_status(
+    order_id: int,
+    status_update: AdminOrderStatusUpdate,
+    db: Session = Depends(get_db),
+    current_admin: User = Depends(get_current_admin_api),
+):
+    """
+    Update order status.
+
+    Admin can update status and add tracking number.
+    Status changes are logged with optional reason.
+    """
+    order = order_service.update_order_status_admin(
+        db=db,
+        order_id=order_id,
+        status=status_update.status,
+        tracking_number=status_update.tracking_number,
+        reason=status_update.reason,
+    )
+
+    logger.info(
+        f"Admin {current_admin.email} updated order {order.order_number} "
+        f"status to {status_update.status}"
+    )
+
+    db.commit()
+    return order