Document verified npm release - #6

Outcome

• Documents the verified public npm release of opencode-model-control@0.1.2.
• Makes the pinned npm command the default install path.
• Retains the exact immutable GitHub release artifact and checksum as a direct-install alternative.
• Keeps Linux acceptance explicitly separate and unverified.

Verification

• Public npm metadata and latest resolve to 0.1.2.
• Registry integrity and shasum were recorded successfully.
• Clean isolated global install from the public registry passed on macOS.
• Installed CLI --version and --help passed.
• Fresh local runtime returned HTTP 200 with the expected security headers.
• Health and read-only OpenCode integration status endpoints passed without installing or mutating the integration.
• npm run verify passed: type check, 151 tests, and production build.

Safety and compatibility

• Documentation-only change; routing and OpenCode configuration behavior are unchanged.
• No credentials, private prompts, customer data, absolute user paths, or generated local settings are included.
• Linux remains labeled expected pending independent acceptance.
• The commit is signed off according to the DCO in CONTRIBUTING.md.