The sustainable expansion of hydrogen supply system within the small-scale chemical industrial park is currently bottlenecked by the dual challenges of prohibitive labour costs associated with replacement of depleted hydrogen tanks and the safety risks inherent to process upset or reaction runaway in hydrogen production equipments. Addressing these operational constraints calls for the development of a shared hydrogen supply system, in which infrastructure layout and safety objectives are generally stepwise optimized. To this end, this paper proposes a novel design methodology through integrating a superstructure-based network design with a transshipment model, capturing the dynamic interaction between exchange hydrogen flow and hydrogen supply. The superstructure enumerates all feasible exchange routes among hydrogen tanks and production equipment, while the transshipment formulation identifies the cost-minimizing flow allocation and facility locations. This integration captures the dynamic interaction between hydrogen flow exchange and facility layout within a single framework, which has not been achieved in existing shared hydrogen system designs. Based on a multi-period mixed-integer nonlinear programming (MINLP) formulation, this framework explicitly incorporates a multi-branch connected hydrogen network and quantifies safety risks into quantitative layout constraints, thereby achieving a robust trade-off between economic efficiency and industrial park safety. In the case study, the proposed method reduced the total operational cost by 12.5