Round 8: Customer order detail + returns flow + picking list + PSI audit

Shopper-facing order detail page with noindex and ownership guards. Return request flow. Admin picking list wire-up. Weekly PSI audit. Cloudflare prep for custom domains.