feat: complete native OpenCode lifecycle

[bitgorust]

Summary

• verify the packed package against the current stable and oldest supported OpenCode hosts through official and direct configuration routes
• separate publish, datasource, deploy, and audience permissions with fail-closed pre-mutation handling
• return bounded structured lifecycle results and add checked reopen support
• add explicit, atomic project/global installation for the native OpenCode skill

Verification

• npm run build with Node 24
• full suite: 234 passed, 0 failed
• npm run check: 35 registered checks passed
• final packed host matrix passed for OpenCode 1.18.18 (current stable and oldest supported deduplicated)
• package SHA-256: df778eafd2cd17b6f2674224af85767089024d326765f34c5e10bbb60307e091

Stacked on Goal 3: #7.