feat: add secure multi-runtime controls

Make agent backends configurable and governable with encrypted credentials, explicit context sharing, and tool approval boundaries.

Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>

src/main/agent/opencode-runtime.ts

@@ -19,6 +19,7 @@ export type OpenCodeRuntimeOptions = {
 }
 
 export class OpenCodeRuntime implements AgentRuntime {
+  readonly requiresToolApproval = true
   private client?: OpencodeClient
   private server?: OpenCodeServer
   private readonly sessions = new Map<string, string>()
@@ -108,7 +109,7 @@ export class OpenCodeRuntime implements AgentRuntime {
     signal: AbortSignal
   ): AsyncGenerator<AgentEvent, void, void> {
     const client = await this.getClient()
-    const directory = request.workspace ?? this.options.defaultWorkspace
+    const directory = this.options.defaultWorkspace
     const sessionId = await this.getSessionId(client, request, directory)
 
     yield {