Report security issues through GitHub private vulnerability reporting for
NDDev-it-com/nddev-opencode-app.
Do not include provider API keys, OpenCode auth files, private repository content, or live user configuration in reports unless explicitly requested in a private channel.