feat(zsh): add Bitwarden SSH agent support

Export SSH_AUTH_SOCK pointing to the Bitwarden SSH agent socket
(~/.bitwarden-ssh-agent.sock) on macOS, guarded by checks that the
Bitwarden application is installed and the socket file exists, so
unmodified environments are unaffected.

Also correct two indentation inconsistencies in the .local/bin PATH
export and the lsd alias else-branch.

.config/opencode/opencode.jsonc

@@ -47,6 +47,8 @@
       "npm run test:integration": "allow",
       "npm run test:e2e": "allow",
       "npm run type-check": "allow",
+      "npm run package:dev": "allow",
+      "npx vitest run *": "allow",
       "npx *": "ask",
       // Python
       "python -m unittest *": "allow",
@@ -71,6 +73,17 @@
       "docker ps *": "allow",
       "docker logs *": "allow",
       "docker compose logs *": "allow",
+      "docker manifest inspect": "allow",
+      // Ansible
+      "ansible-playbook --version": "allow",
+      "ansible-playbook --syntax-check *": "allow",
+      "ansible-lint --version": "allow",
+      // OpenTofu
+      "tofu version": "allow",
+      "tofu init -backend=false": "allow",
+      "tofu validate *": "allow",
+      "tofu fmt -check *": "allow",
+      "tofu plan *": "allow",
     },
     "read": {
       "/tmp/opencode": "allow",
@@ -129,6 +142,10 @@
     "question": "allow",
     "lsp": "allow",
     "websearch": "allow",
+    "webfetch": "allow",
+    "task": "allow",
+    "todowrite": "allow",
+    "skill": "allow",
   },
   "mcp": {
     "zai-mcp-server": {
@@ -162,13 +179,19 @@
     },
     "playwright": {
       "type": "local",
+      "enabled": false,
       "command": ["npx", "@playwright/mcp@latest"],
-      "enabled": true,
     },
     "chrome-devtools": {
       "type": "local",
+      "enabled": false,
       "command": ["npx", "-y", "chrome-devtools-mcp@latest"],
     },
+    "primevue": {
+      "type": "local",
+      "enabled": true,
+      "command": ["npx", "-y", "@primevue/mcp"],
+    },
     "ibmi-server": {
       "type": "local",
       "command": [
@@ -201,7 +224,7 @@
   },
   "lsp": true,
   "formatter": true,
-  "model": "openai/gpt-5.6-terra",
+  "model": "openai/gpt-5.6-sol",
   "small_model": "openai/gpt-5.6-luna",
   "agent": {
     "explore": {

.zshrc

@@ -21,7 +21,7 @@ fi
 
 # Add .local/bin to $PATH if it doesn't exist
 if [[ ":$PATH:" != *":$HOME/.local/bin:"* ]]; then
-  export PATH=$PATH:$HOME/.local/bin
+    export PATH=$PATH:$HOME/.local/bin
 fi
 
 # Add script binaries to $PATH if they exist
@@ -53,6 +53,14 @@ if [[ "$(uname -s)" == "Darwin" ]]; then
     if [[ -d $HOME/Library/Python/3.8/bin && ":$PATH:" != *":$HOME/Library/Python/3.8/bin:"* ]]; then
         export PATH=$PATH:$HOME/Library/Python/3.8/bin
     fi
+
+    # Bitwarden SSH agent (only if the application is installed and the socket file exists)
+    local bw_app="/Applications/Bitwarden.app"
+    local bw_sock="$HOME/.bitwarden-ssh-agent.sock"
+
+    if [[ -d "$bw_app" && -S "$bw_sock" ]]; then
+        export SSH_AUTH_SOCK="$bw_sock"
+    fi
 fi
 
 # Add goland $PATH if installed and not already in $PATH
@@ -171,7 +179,7 @@ if command -v lsd &> /dev/null; then
     alias lg="lsd -F --group-dirs=first" # Group directories first
     alias lt="lsd --tree --depth 5" # Show directory tree with depth of 5
     alias li="lsd -ilAF" # Show inode numbers
-    else
+else
     alias la="ls -a" # Show all files
     alias ll="ls -alh" # Show all files, long format, human readable sizes
     alias li="ls -ialh" # Show all files, long format, human readable sizes, inode numbers