fix(worker): route done-toggle and dequeue through guarded TaskStateService transitions

The task-list done toggle (both islands) and RemoveFromQueue wrote TaskEntity.Status
directly via EF, bypassing TaskStateService: no TaskUpdated broadcast, no guard against
a concurrent picker claim (lost update), and no status-based filter. Added guarded
MarkDoneAsync/UnmarkDoneAsync/DequeueToIdleAsync transitions plus matching hub methods
(SetTaskDone/UnsetTaskDone/DequeueTask) and IWorkerClient wrappers; the three UI call
sites now route through the hub with optimistic-then-revert row updates and
ErrorReported on failure. RemoveFromQueueAsync dequeues each queued child individually
through the same guarded path instead of cascading via a raw EF update.

Also closes two hub guard gaps: UpdateListConfig's delete branch now preserves a list's
SerializeOnFileOverlap flag instead of dropping it, and SubmitTaskForReview's Idle/Failed
status gate now runs before either mutation branch so a Done/Cancelled task can't get
committed or stamped and then rejected.

src/ClaudeDo.Worker/State/Interfaces/ITaskStateService.cs

@@ -21,6 +21,16 @@ public interface ITaskStateService
 
     Task<TransitionResult> ForceSetStatusAsync(string taskId, ClaudeDo.Data.Models.TaskStatus status, CancellationToken ct);
 
+    // Guarded "manual done toggle" affordance (task list checkbox): unlike ForceSetStatusAsync,
+    // these check the expected starting status in the same ExecuteUpdateAsync filter so a
+    // concurrent picker claim (Idle/Done -> Running) is not silently overwritten.
+    Task<TransitionResult> MarkDoneAsync(string taskId, DateTime finishedAt, CancellationToken ct);
+    Task<TransitionResult> UnmarkDoneAsync(string taskId, CancellationToken ct);
+
+    // Guarded "remove from queue" affordance. Expects the task to still be Queued; clears
+    // BlockedByTaskId in the same update so a queued chain child never ends up Idle-but-blocked.
+    Task<TransitionResult> DequeueToIdleAsync(string taskId, CancellationToken ct);
+
     Task<TransitionResult> StartPlanningAsync(string parentId, CancellationToken ct);
     Task<TransitionResult> FinalizePlanningAsync(string parentId, CancellationToken ct);