Scope the task list to spaces the user can see

Restricts task list queries to only spaces the user can access, preventing users from reading tasks in private spaces.