opencode: two profiles, per-profile permissions, shared agent prompts

oc-work: local models only on the local key, edits and most commands ask,
loads instructions/work.md. oc-local (also oc, opencode): every model,
defaults to qwen3.8-flash-next-iq3s-med, edits and commands run except
destructive and outward-facing ones. On sctfw004 oc-local presents the work
key. personal.json and work-strict.json removed.

Agents: drop variant, which has no effect on LiteLLM models. dev takes its
permissions from the profile. The read-only agents deny redirects and the
write/exec flags of allowed commands, swap find for fd, and only allow
listing forms of git branch. review defaults to the uncommitted diff.

CLAUDE.md: add the comment, process and shell-tool rules from the laptop's
AGENTS.md, and note that OpenCode reads this file.

common/opencode/instructions/work.md

@@ -0,0 +1,16 @@
+## Work profile
+
+This session is on the work profile. Connor reviews every change by hand, so
+the goal is the smallest change he can read and check.
+
+- Change code only when asked to. When the task is to investigate or explain,
+  report and stop.
+- Before editing, say which files you will change and what each change is.
+  Wait for agreement when the change is more than a few lines.
+- One change at a time. Don't fold in refactors, renames, formatting or
+  cleanup that were not asked for. Mention them instead.
+- Make every edit with the edit tool, so each one is shown as a diff before it
+  is applied. No sed, scripts or redirects to modify files.
+- Don't add dependencies, and don't create files unless the task needs them.
+- Builds and tests ask for permission here. Say which command you want to run
+  and why.