Known gaps

No password reset. A locked-out owner has no self-service path back in; recovery means an operator resetting the row, or signing in with Google on the same address.
No email. Nothing sends order confirmations, invites or notifications.
Checkout has no payment step. POST /orders records the order and reserves stock; no processor is involved.
Refunds are still a toast: the button in the order drawer does nothing.