Docs/Tasks.md

@@ -176,6 +176,8 @@ Reference: `Docs/Refactoring.md` for full analysis of each issue.
 
 **Why this is needed:** Security-sensitive token construction is business logic. Letting the HTTP layer build cookie values means a future maintainer adding a second login endpoint could forget the signing step, creating a silent security regression.
 
+**Status:** Completed ✅
+
 ---
 
 ### Task 10 — Remove the repository import from `utils/setup_utils.py`