Add delivery and supplier HTTP APIs with expanded response docs.

Wire store-backed CRUD for goods receipts and suppliers, and teach the API doc generator to expand $ref/allOf/array samples so route markdown shows full JSON shapes.

docs/api/routes/delivery/update.md

@@ -0,0 +1,66 @@
+# `PATCH /delivery/{id}`
+
+Protected. Requires a valid session cookie (`credentials: 'include'`).
+
+Update delivery
+
+Patches header fields that are present. If `lines` is present, replaces
+all lines; if omitted, leaves lines unchanged. Returns the full delivery.
+
+
+## Path parameters
+
+| Param | Required | Type | Description |
+|-------|----------|------|-------------|
+| `id` | yes | integer |  |
+
+## Body (JSON)
+
+```json
+{
+  "number": "DHL-124",
+  "lines": []
+}
+```
+
+## Response `200`
+
+Updated delivery
+
+```json
+{
+  "delivery": {
+    "id": 1,
+    "number": "…",
+    "type": "delivery",
+    "supplierId": 1,
+    "date": "2026-08-10T00:00:00.000Z",
+    "lines": [
+      {
+        "id": 1,
+        "articleId": 1,
+        "sku": "…",
+        "amount": 1,
+        "net": 1,
+        "transactedAmount": 1,
+        "rebate": 1,
+        "tax": 1,
+        "comment": "…"
+      }
+    ]
+  }
+}
+```
+
+## Errors
+
+| Status | Description |
+|--------|-------------|
+| 400 | Invalid delivery, invalid lines, invalid id, or no company selected — `{"error":"…"}` |
+| 401 | Unauthorized — `{"error":"…"}` |
+| 403 | Not authorized — `{"error":"…"}` |
+| 404 | Delivery, supplier, article, or company not found — `{"error":"…"}` |
+
+---
+
+_Generated from `@openapi` JSDoc. Do not edit by hand — run `npm run docs:api`._