Method	Path	Auth	Request Body	Description
GET	/health	No	—	Simple health-check.
POST	/orders	No	{ "customer":"Alice", "tosti":"Veggie Delight", "paid":true?, "status":"pending"? } (paid optional boolean, default false; status optional, one of pending/preparing/ready/delivered, default pending)	Create a new order. Returns { "id": <int>, "message":"Order recorded" } OR {error: [error message]}.
GET	/orders	Yes	—	List all orders, newest first. Returns { "count": <int>, "orders":[ … ] } OR {error: [error message]}.
PATCH	/orders/:id	Yes	{ "paid":true?, "status":"preparing"? } At least one of paid (boolean) or status (one of pending/preparing/ready/delivered) required.	Update paid and/or status. Returns { "message":"Order updated", "id":<int> } OR {error: [error message]}.