feat: list + task endpoints and CORS, verified end-to-end

server/api/tasks/[id].delete.ts

@@ -0,0 +1,6 @@
+// DELETE /api/tasks/:id (desktop) — task left Idle on desktop. Idempotent.
+export default defineEventHandler(async (event) => {
+  await deleteTask(getSql(), getRouterParam(event, "id")!);
+  setResponseStatus(event, 204);
+  return null;
+});