OpenCode permission configuration practice: restricting Shell, file writing, network access and dangerous commands