Association commandes client → commandes magasin → factures magasin.
API: GET /api/orders, POST /api/sync avec Authorization: Bearer <ADMIN_TOKEN>.
GET /api/orders
POST /api/sync
Authorization: Bearer <ADMIN_TOKEN>