feat: list + task endpoints and CORS, verified end-to-end

server/api/tasks/[id]/consume.post.ts

@@ -0,0 +1,8 @@
+// POST /api/tasks/:id/consume (desktop) — mark a web task imported. Idempotent.
+export default defineEventHandler(async (event) => {
+  const ok = await consume(getSql(), getRouterParam(event, "id")!);
+  if (!ok) {
+    throw createError({ statusCode: 404, statusMessage: "task not found" });
+  }
+  return { ok: true };
+});