Document verified 0.2.0 release

[BitL8-ByteShort]

Outcome

• Records the verified public publication of opencode-model-control@0.2.0 on npm.
• Links the immutable GitHub v0.2.0 release and records the shared SHA-256 artifact identity.
• Keeps Linux fresh-install acceptance explicitly separate from publication.

Verification

• npm latest and version metadata report 0.2.0.
• The npm registry tarball SHA-256 matches the tested local release artifact.
• The public GitHub release is immutable and its downloaded tarball plus checksum verify against the same artifact.
• A disposable install from the public npm registry reports version 0.2.0.
• git diff --check passed.

Safety and compatibility

• Unknown pricing and unavailable models still fail closed in every cost mode.
• Paid routing remains an explicit user choice and cannot bypass capability gates.
• No credentials, private prompts, customer data, absolute user paths, or generated local settings are included.
• OpenCode config writes are explicit, receipt-owned, recoverable, and preserve unrelated settings.
• New behavior includes failure-path coverage where relevant.
• I signed off my commits according to the DCO in CONTRIBUTING.md.