fix: corregir verificación de asignados y usar noopener en enlaces

Co-authored-by: aider (openrouter/openai/gpt-5) <aider@aider.chat>

apps/web/src/lib/ui/data/TaskItem.svelte

@@ -23,7 +23,7 @@
 
 	const code = display_code ?? id;
 	const codeStr = String(code).padStart(4, "0");
-	$: isAssigned = currentUserId ? assignees.includes(currentUserId) : false;
+	$: isAssigned = !!currentUserId && assignees.some((a) => normalizeDigits(a) === normalizeDigits(currentUserId));
 	$: today = todayYmdUTC();
 	$: overdue = !!due_date && compareYmd(due_date, today) < 0;
 	$: imminent = !!due_date && (isToday(due_date) || isTomorrow(due_date));
@@ -382,7 +382,7 @@
 			<ul class="assignees-list">
 				{#each assignees as a}
 					<li>
-						<a href={buildWaMeUrl(normalizeDigits(a))} target="_blank" rel="noreferrer nofollow">
+						<a href={buildWaMeUrl(normalizeDigits(a))} target="_blank" rel="noopener noreferrer nofollow">
 							{normalizeDigits(a)}
 						</a>
 						{#if currentUserId && normalizeDigits(a) === normalizeDigits(currentUserId)}