chore: remove TODO johannesjo#13 and johannesjo#14 sections (already landed)

Author: brooksc

TODOS.md

@@ -9,22 +9,6 @@
 
 ---
 
-## Beta blockers — lifecycle/scoping issues
-
-### 13. Coordinator cross-contamination — tasks not scoped to their coordinator
-
-**Files:** `electron/mcp/server.ts:75-80` (`create_task`), `electron/remote/server.ts:300-325,420-450` (`list_tasks`, `send_prompt`, `merge_task`, `close_task`)
-**What's wrong:** `create_task` sends no `projectId`. Tool handlers accept `taskId` without verifying the caller's `coordinatorId`. Multiple concurrent coordinators can see and control each other's sub-tasks.
-**Done when:** Every MCP tool call that targets a specific task passes `coordinatorId`, and each handler rejects calls where `task.coordinatorTaskId !== coordinatorId`.
-
-### 14. Coordinator MCP broken when remote access server was already running
-
-**File:** `electron/ipc/register.ts` (`StartMCPServer`), `electron/remote/server.ts` (`startRemoteServer`)
-**What's wrong:** `StartMCPServer` skips `startRemoteServer()` if already running. If remote access started first (without a coordinator), coordinator-specific API routes are never registered.
-**Done when:** Either route handlers look up coordinator at request time via a mutable closure, or the server is torn down and recreated when a coordinator registers.
-
----
-
 ## Known edge cases — no fix yet
 
 ### 7. Autofire expiry window — coordinator in long tool call during countdown