fix(opencode-sms-bridge): select v1 route-prefix image

[xnoto]

Summary

Select ghcr.io/makeitworkcloud/opencode-sms-bridge:adb1e0e72729a7182b4a4929bd67e0275fba8173, the immutable image published after images PR #41. It corrects the OpenCode v1.18.23 session route prefix from the incompatible legacy V2 /api/session... surface to the blocking HTTP-API /session... surface.

Verified producer evidence: images buildah run 33976054695 passed and published the selected immutable tag at digest sha256:607a426dad63dd563cfcca9f9720a0bc5068a8d812b4d4dabd63a0291895bd30.

This PR changes only the bridge image tag in the existing opencode-sms-bridge Application. It changes no chart version, Secret, routing/allowlist, Service, TunnelBinding, or sync policy.

Fixes #

None — owner-authorized route-prefix repair rollout; no driving issue supplied.

Type of change

• Bug fix
• Feature / enhancement
• Documentation
• Infrastructure (OpenTofu root or module)
• GitOps desired state (manifests, kustomize, charts, SOPS/KSOPS secrets)
• Container image
• CI / reusable workflow
• Refactor / cleanup
• Breaking change

Validation

• Required pull-request checks pass — pending. Repository PR CI is the validation authority.
• Generated or centrally distributed files were regenerated by their owning automation, not hand-edited — none apply; this is a one-line immutable image-pin change.

No local OpenTofu, SOPS, container build, cluster, or live-system operation was run or claimed.

Impact and rollout

Producer: images merged adb1e0e… and published the selected image. Publication is complete.

Consumer: workloads/apps/opencode-sms-bridge-app.yaml is the canonical GitOps image-selection point. This PR proposes, but does not itself perform, selection or reconciliation.

Delivery stages: source is merged, published, and verified by producer CI; GitOps selection is proposed and PR validation is pending. An authorized merge runs test on main; only a successful test triggers automatic root-sync submission. Root and child reconciliation, resource health, Pod image, and the approved-source SMS reply remain separate verification stages.

Rollback: use a reviewed GitOps PR to restore the prior immutable tag 6b48ddeaa5897a3d07dc28aa929a941219ec8993; do not retag images or patch live resources.

Safety and secrets

• Contains no plaintext secrets, decrypted SOPS values, state files, kubeconfigs, tokens, or private endpoints
• No local OpenTofu init/plan/apply/destroy/import/state operations were run or claimed — plans come from pull-request checks
• Breaking or irreversible effects are described above with rollback notes

AI-assisted change: an OpenCode agent materially produced this change; review the producer evidence, one-line diff, and automatic post-merge reconciliation behavior before merge.