feat(opencode): allow bash on yolo only

Global config keeps bash at "ask", which stalls every unattended opencode
session on git and grep. yolo runs the PR daemon's reviewers, so the prompt
is a deadlock there rather than a gate.

Merges like claude-settings.json: home/yolo/opencode.json holds only the
override, so agents, commands and skills still come from common. Reviewers
run on branches under review, so this drops that prompt too.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

home/yolo/default.nix

@@ -14,6 +14,14 @@ let
       lib.importJSON ./claude-settings.json
     )
   );
+
+  # Same merge, same reason: ./opencode.json holds only yolo's overrides so
+  # agents, commands and skills keep coming from common.
+  mergedOpencodeConfig = (pkgs.formats.json { }).generate "opencode.json" (
+    lib.recursiveUpdate (lib.importJSON ../common/programs/opencode/opencode.json) (
+      lib.importJSON ./opencode.json
+    )
+  );
 in
 {
   imports = [
@@ -29,6 +37,11 @@ in
     ./ssh.nix
   ];
 
+  # Host-local, like the aoe config below: bash goes from "ask" to
+  # "allow" so unattended opencode sessions stop stalling on every git and grep.
+  # It also drops the prompt on branches under review, which is the tradeoff.
+  xdg.configFile."opencode/opencode.json".source = lib.mkForce mergedOpencodeConfig;
+
   custom.hyprland.cursorSize = 32;
 
   # Amber, and a different silhouette to Nordzy — this desktop is only ever seen

home/yolo/opencode.json

@@ -0,0 +1,5 @@
+{
+  "permission": {
+    "bash": "allow"
+  }
+}