opencode plugin: a System One decision model judges every bash command before it runs — destructive / credentials / your guardrails.md policy