The announcement in the Developer Community: https://community.shiphero.com/t/update-order-attachments/3062
Attachments can now be added to the order using the API. They can also be queried:
The mutation won't upload the file; it will point to the URL provided, so the URL sent must be available for as long as the file is needed to be reachable.