# Task 07: Orders Management

## Goal
Admin updates order + payment status. User views own orders.
When admin records a return, StockService::recordReturn() is called.

## Files
- `app/Http/Controllers/Admin/Ecommerce/OrderController.php`
- `app/Http/Controllers/Api/OrderController.php`
- `app/Events/OrderStatusUpdated.php`
- `app/Policies/OrderPolicy.php`
- `app/Http/Resources/Ecommerce/OrderResource.php`
- `resources/views/dashbord/admin/ecommerce/orders/`
- `resources/views/orders/`

## Steps
1. Admin `updateOrderStatus()` → validate forward-only, dispatch event
2. Admin `updatePaymentStatus()` → update, trigger digital access check
3. `OrderPolicy` → user views own; admin updates
4. Build views, register routes