updated frontend

Frontend/1 het/backend/README.md

@@ -62,8 +62,15 @@ Cookie is HTTP-only and set with `sameSite=lax`.
 - `GET /api/health`
 - `GET /api/shop/categories`
 - `GET /api/shop/products`
+- `GET /api/shop/products/:productId`
+- `POST /api/shop/products` (`multipart/form-data` is supported, field name: `image`)
+- `POST /api/shop/products/:productId/image` (`multipart/form-data`, field name: `image`)
 - `POST /api/shop/orders`
 
+Uploaded files are stored in `images/uploads` and are served at `/images/uploads/<filename>`.
+
+Product responses include `image_url` with an absolute URL when an image exists.
+
 Order payload:
 
 ```json