Address JSON escaping feedback from PR #13

[Copilot]

The review comment on PR #13 requested proper JSON escaping for task_id in reopen_task() to prevent injection vulnerabilities in Sync API payloads.

Changes

• Applied escape_json(task_id) in reopen_task() function (commit 040e023)
• Ensures all task ID parameters are properly escaped before interpolation into JSON commands

The fix was already applied in commit 040e023 as part of broader JSON escaping improvements across the codebase.

# Before
commands = glue('[{{"type": "item_uncomplete", "uuid": "{random_key()}", "args": {{"id": "{task_id}"}}}}]')

# After  
commands = glue('[{{"type": "item_uncomplete", "uuid": "{random_key()}", "args": {{"id": "{escape_json(task_id)}"}}}}]')

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.