feat: complete admin panel and backend admin api migration

apps/api/src/modules/orders/orders.controller.ts

@@ -2,7 +2,9 @@ import { Body, Controller, Get, Param, Patch, Post } from '@nestjs/common';
 import { OrdersService } from './orders.service';
 import { CreateOrderDto } from './dto/create-order.dto';
 import { UpdateOrderStatusDto } from './dto/update-order-status.dto';
+import { Public } from '../auth/guards';
 
+@Public() // pre-existing unauthenticated endpoint; see Phase 1 notes
 @Controller('orders')
 export class OrdersController {
   constructor(private readonly orders: OrdersService) {}