docs(mobile): record Hosted Tasks on the generic host lane

Claude-Session: https://claude.ai/code/session_01JNnE9qzUZMMnqpZWCqM3nb

docs/reference/mobile-hybrid-webview-architecture.md

@@ -207,10 +207,19 @@ edges still meet the device and keep their measured values.
   and node-count limits. Per-operation grants on `workspace.hostRequest` still
   supply the in-flight ceiling, and cancelling a page request does not release
   its host-work slot until the host call settles. The Desktop is trusted, so the
-  page addresses host tabs, browser pages and provider sessions by their host
-  ids. Generic subscriptions, native-chat domain actions, file reads, Source
-  Control reads/watch, session snapshot/feed/actions and terminal metadata use
-  this path.
+  page addresses host tabs, browser pages, provider sessions, repositories and
+  work items by their host ids. Generic subscriptions, native-chat domain
+  actions, file reads, Source Control reads/watch, session snapshot/feed/actions,
+  terminal metadata and every Hosted Tasks read and write use this path.
+- Hosted Tasks runs the operation modules the native app runs
+  (`mobile/src/tasks/native-host-task-*.ts`) over a page-side sender that
+  forwards `sendRequest` as `workspace.hostRequest`
+  (`web-host-task-rpc-sender.ts`). Those methods are already on the released
+  native app's socket allowlist, so the socket gate admits them with no
+  `mobileWeb.*` wrapper. The one exception is the GitHub project table: a view
+  holds up to 500 items and can exceed the envelope, so
+  `mobileWeb.tasks.projectTable` returns one row window plus a `nextRowOffset`
+  and the page reassembles the table.
 - Decisions behind the generic lane and its 2026-09-07 simplification are in
   [`plans/2026-09-07-long-lived-mobile-shell-decisions.md`](./plans/2026-09-07-long-lived-mobile-shell-decisions.md).
   Unmigrated domain operations keep their current adapters until moved.