Sync upstream opencode 1.18.33 browser-open fix (open 11.0.4) #1629

altimate-code 0.12.8 still pins open 10.1.2 in packages/opencode/package.json, and src/mcp/index.ts passes the MCP OAuth authorizationUrl straight to open(). Upstream opencode changed this in 1.18.33 (PR #51414): it bumps open to 11.0.4, adds an http(s)-only openUrl() and adds a scheme check in redirectToAuthorization. Pillar Security has since shown that the old path allows command injection on Windows and WSL through a crafted authorization_endpoint: https://www.pillar.security/blog/open-and-shut-remote-code-execution-in-opencode-via-mcp-oauth. Could you port that change or sync with upstream 1.18.33 or later?