Admin order detail view displays full lifecycle history

An admin detail view that shows only the current order status gives a misleading picture: the order is 'shipped', but was it ever in 'confirmed'? Was it cancelled and re-opened? Did the admin manually override a status? Without the full history timeline, admins cannot diagnose processing anomalies, verify that the correct notifications fired at each step, or respond to customer complaints about 'the order status changed without warning.' CWE-778 and GDPR Art. 5(1)(f) both require that the audit trail is accessible, not just stored — data in a table that no UI surfaces is operationally equivalent to data that was never captured.

Add an order timeline section to the admin order detail page at app/admin/orders/[id]/page.tsx by including the history relation in the Prisma query.

// app/admin/orders/[id]/page.tsx
const order = await db.orders.findUnique({
  where: { id: params.id },
  include: {
    items: true,
    user: true,
    history: { orderBy: { createdAt: 'asc' } },
  },
})

// Render:
<ol>
  {order.history.map((entry) => (
    <li key={entry.id}>
      <time>{entry.createdAt.toLocaleString()}</time>
      <span>{entry.fromStatus ? `${entry.fromStatus} → ${entry.toStatus}` : entry.toStatus}</span>
      {entry.note && <p>{entry.note}</p>}
      {entry.actorId && <span>by {entry.actorId}</span>}
    </li>
  ))}
</ol>