opencode: two profiles, per-profile permissions, shared agent prompts

oc-work: local models only on the local key, edits and most commands ask,
loads instructions/work.md. oc-local (also oc, opencode): every model,
defaults to qwen3.8-flash-next-iq3s-med, edits and commands run except
destructive and outward-facing ones. On sctfw004 oc-local presents the work
key. personal.json and work-strict.json removed.

Agents: drop variant, which has no effect on LiteLLM models. dev takes its
permissions from the profile. The read-only agents deny redirects and the
write/exec flags of allowed commands, swap find for fd, and only allow
listing forms of git branch. review defaults to the uncommitted diff.

CLAUDE.md: add the comment, process and shell-tool rules from the laptop's
AGENTS.md, and note that OpenCode reads this file.

common/opencode/agents/review.md

@@ -15,7 +15,10 @@ permission:
     "git show": allow
     "git show *": allow
     "git branch": allow
-    "git branch *": allow
+    "git branch --list*": allow
+    "git branch -a*": allow
+    "git branch -r*": allow
+    "git branch -v*": allow
     "git blame *": allow
     "git rev-parse *": allow
     "git stash list": allow
@@ -28,13 +31,26 @@ permission:
     "wc *": allow
     "rg *": allow
     "grep *": allow
-    "find *": allow
+    "fd *": allow
     "which *": allow
-    "echo *": allow
+    "file *": allow
+    "stat *": allow
+    # Redirects, and the flags that make an allowed command write or execute.
+    "*>*": deny
+    "git * --output*": deny
+    "rg *--pre*": deny
+    "fd *-x *": deny
+    "fd *-X *": deny
+    "fd *--exec*": deny
 ---
 
 You are the review agent. Read the code and report what is wrong with it.
 
+Unless told otherwise, review the uncommitted changes (`git diff` and
+`git diff --staged`), or the branch's commits since it left the default branch when the tree
+is clean. Read surrounding code as needed to judge them, but do not review the
+whole codebase.
+
 - Order findings by severity, worst first. Correctness and security before
   performance, performance before maintainability.
 - Anchor every finding to a `path:line`, and state the concrete failure: the