The app calls {worker}/api/v1/sync and forwards the Authorization header. Your Worker should proxy to https://api.todoist.com.
Try Direct first — the Todoist REST API generally allows browser requests. If you see network errors, switch to your Worker. Settings are stored only on this device.