Fixed url pattern in the doc for path-based shops

docs/api/authentication.md

@@ -211,6 +211,14 @@ Set-Cookie: vendor_token=<JWT>; Path=/vendor; HttpOnly; Secure; SameSite=Lax
 
 **Purpose:** Product browsing (public), customer accounts, orders, profile management.
 
+**Important - URL Pattern Context:**
+The `/shop/*` routes work differently depending on deployment mode:
+- **Subdomain Mode** (Production): `https://vendor.platform.com/shop/products`
+- **Custom Domain** (Production): `https://customdomain.com/shop/products`
+- **Path-Based** (Development): `http://localhost:8000/vendors/{vendor_code}/shop/products`
+
+In path-based development mode, the full URL includes the vendor code (e.g., `/vendors/acme/shop/products`), but the routes are still defined as `/shop/*` internally. See [URL Routing Guide](../architecture/url-routing/overview.md) for details.
+
 **Access Control:**
 - **Public Routes** (`/shop/products`, `/shop/cart`, etc.):
   - ✅ Anyone can access (no authentication)