#490 release: sync test → main

Promotes test to main.

Included

• feat(tasks): enhance delete task functionality with account resolution and access control (#487)

🤖 Generated with Claude Code

---

Summary by cubic

Add account resolution and access control to task deletion in both the API and the MCP tool. This secures deletes by enforcing ownership and improves error clarity (403/404) with UUID validation.

• New Features
  • Enforce ownership in deleteTask by requiring resolvedAccountId; throw 403 on mismatched account_id.
  • Resolve account via resolveAccountId in the MCP delete_task tool; return specific errors for "Task not found" and "Access denied".
  • Add validateDeleteTaskRequest to parse JSON, require UUID id, and validate auth; handler now returns 403 for access denied and 404 for missing tasks.
  • Tighten deleteTaskBodySchema to uuid(); update tests and add coverage for request validation and auth paths.