feat(opencode): guide comments and bespoke content

[xnoto]

Summary

Implements the owner-directed primary-agent policy update for opencode-server 0.1.72:

• all nine primary agents now prefer self-explanatory code and retain comments only for non-obvious, durable, approved exceptions;
• all nine prefer vendor- or canonical-owner-maintained solutions and require explicit owner approval before a last-resort self-maintained operational artifact;
• qa-engineer now owns documentation-adequacy assessment alongside test coverage, while docs-writer remains the standalone-documentation drafter; and
• chart README and instruction-architecture documentation now describe the updated boundaries.

Fixes # N/A — owner-directed instruction update.

Type of change

• Bug fix
• Feature / enhancement
• Documentation
• Infrastructure (OpenTofu root or module)
• GitOps desired state (manifests, kustomize, charts, SOPS/KSOPS secrets)
• Container image
• CI / reusable workflow
• Refactor / cleanup
• Breaking change

Validation

• Required pull-request checks pass — repository hygiene, Helm validation, changed-chart detection, and package opencode-server passed for current head 35a3d59b29d43184bfaa85df9becac710ea95dbf.
• Generated or centrally distributed files were regenerated by their owning automation, not hand-edited — not applicable; all changed chart content is hand-authored.

Review gate record: adversarial review: ADVANCE; infrastructure-security review: ADVANCE; release review: READY; documentation consistency: CONSISTENT. QA reports GAPPED because current CI does not semantically assert duplicated primary-policy parity or rendered ConfigMap content. The owner explicitly directed this rollout before a separate CI-hardening decision; this is an explicit owner waiver for the deferred validation-hardening scope, not a claim that the gap is closed.

Impact and rollout

Producer: opencode-server chart 0.1.72; chart-packaged agent and documentation content only. Consumers: OpenCode sessions after the chart is selected and rolled out. Unchanged: application version, image, Helm templates, values, workflow permissions, secrets, and GitOps manifests.

Automatic after a confirmed merge: the main workflow publishes immutable OCI chart ghcr.io/makeitworkcloud/charts/opencode-server:0.1.72, then opens or updates the kustomize-cluster version-pin pull request with auto-merge enabled. Separate stages: the destination PR's required checks, Argo CD reconciliation, Deployment rollout, pod health, and fresh-session functional verification. Rollback: select immutable chart 0.1.71 through the canonical GitOps Application; no state migration is involved.

Safety and secrets

• Contains no plaintext secrets, decrypted SOPS values, state files, kubeconfigs, tokens, or private endpoints
• No local OpenTofu init/plan/apply/destroy/import/state operations were run or claimed — plans come from pull-request checks
• Breaking or irreversible effects: none; instruction-only package content, with rollback by selecting chart 0.1.71

AI-assisted change: an OpenCode agent materially produced this change. Specialized adversarial, QA, release, infrastructure-security, and documentation-consistency reviews were completed before this pull request was opened.

[github-actions]

Chart CI passed

Repository hygiene and Helm validation passed. View the workflow run.