Allow Product.orders

One thing that our store admins need to do often is find the orders that have been made for a given product. This can be easily achieved by adding these `has_many through:` lines. This seems like a capability that other stores might find useful as well.

Fixes #5247