fix(trade): simplify proxy order and respect product whitelist

Drop SMS verification for HQ/partner proxy orders; keep form draft across product picker; hide whitelist-only products from partner catalog.

Co-authored-by: Cursor <cursoragent@cursor.com>

server/dukang-api/src/modules/trade/trade.controller.ts

@@ -9,7 +9,6 @@ import { CurrentUser } from '../../common/decorators/current-user.decorator';
 import {
   PartnerProxyOrderCreateDto,
   PartnerProxyOrderPreviewDto,
-  PartnerProxyOrderSendCustomerSmsDto,
 } from './dto/partner-proxy-order.dto';
 import { ManualShipOrderDto } from '../ops/dto/admin-mutate.dto';
 import { CreateAfterSaleTicketDto, CreateInvoiceDto } from './dto/after-sale.dto';
@@ -210,24 +209,8 @@ export class PartnerProxyOrderController {
   }
 
   @Post('preview')
-  preview(@Body() dto: PartnerProxyOrderPreviewDto) {
-    return this.tradeService.previewPartnerProxyOrder(dto);
-  }
-
-  /** @deprecated 兼容：转发客户短信 */
-  @Post('send-sms')
-  sendSms(@Body() dto: PartnerProxyOrderSendCustomerSmsDto) {
-    return this.tradeService.sendPartnerProxyCustomerSms(dto.phone);
-  }
-
-  @Post('send-customer-sms')
-  sendCustomerSms(@Body() dto: PartnerProxyOrderSendCustomerSmsDto) {
-    return this.tradeService.sendPartnerProxyCustomerSms(dto.phone);
-  }
-
-  @Post('send-partner-sms')
-  sendPartnerSms(@CurrentUser() user: AuthUser) {
-    return this.tradeService.sendPartnerProxyPartnerSms(user.actorId);
+  preview(@CurrentUser() user: AuthUser, @Body() dto: PartnerProxyOrderPreviewDto) {
+    return this.tradeService.previewPartnerProxyOrderForPartner(user.actorId, dto);
   }
 
   @Post()