feat: tasks app, security hardening, mobile fixes, iOS app shell

- Custom SQLite task manager replacing TickTick wrapper
- 73 tasks migrated from TickTick across 15 projects
- RRULE recurrence engine with lazy materialization
- Dashboard tasks widget (desktop sidebar + mobile card)
- Tasks page with project tabs, add/edit/complete/delete
- Security: locked ports to localhost, removed old containers
- Gitea Actions runner configured and all 3 CI jobs passing
- Fixed mobile overflow on dashboard cards
- iOS Capacitor app shell (Second Brain)
- Frontend/backend guide docs for adding new services
- TickTick Google Calendar sync re-authorized

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

mobile/BUILD_IOS.md

@@ -0,0 +1,37 @@
+# Building Second Brain for iOS
+
+## One-time setup (on your MacBook)
+
+1. Install Xcode from the App Store (if not already installed)
+2. Open Xcode once and accept the license agreement
+3. Install Xcode command line tools: `xcode-select --install`
+4. Install CocoaPods: `sudo gem install cocoapods`
+
+## Copy project to Mac
+
+Copy the `mobile/` folder to your MacBook:
+```bash
+scp -r yusiboyz@192.168.1.42:/media/yusiboyz/Media/Scripts/platform/mobile ~/Desktop/SecondBrain
+```
+
+Or use any file transfer method (AirDrop, USB, etc.)
+
+## Build and install
+
+```bash
+cd ~/Desktop/SecondBrain
+npm install
+npx cap sync ios
+npx cap open ios
+```
+
+This opens Xcode. Then:
+1. Select your iPhone from the device dropdown (top of Xcode)
+2. Click the Play button (or Cmd+R)
+3. First time: Xcode will ask to trust your Apple ID — go to iPhone Settings > General > VPN & Device Management and trust the developer certificate
+4. The app installs and launches!
+
+## After web changes
+
+No rebuild needed — the app loads from dash.quadjourney.com live.
+Only rebuild if you change native plugins or the icon.