Task Store: Query

Add list(query, userId) — returns only the caller's tasks (ownership at the read path!), filtered: query.done === true|false filters on the done flag; query.title substring-matches case-insensitively. Sorted by id ascending. No query => all own tasks.