#690 Test

Summary by cubic

Allow admin callers to fetch any task by id without account_id on GET /api/tasks, dropping account scoping for that case. Non-admin id lookups remain scoped to the authenticated account; the validated query’s account_id is now optional and tests cover both paths.