fix(opencode-sms-bridge): select V2 repair image

[xnoto]

Summary

Select the published OpenCode V2 SMS-bridge repair image caa3224f9c1a8f64c8f93c9fb1662bebf64189bc instead of the functionally failing legacy-message-route image f1e92b0f159230b56f846ab69e6f81057eb796b1.

Fixes #

None — owner-authorized rollout continuation after the published V2 repair.

Type of change

• Bug fix
• Feature / enhancement
• Documentation
• Infrastructure (OpenTofu root or module)
• GitOps desired state (manifests, kustomize, charts, SOPS/KSOPS secrets)
• Container image
• CI / reusable workflow
• Refactor / cleanup
• Breaking change

Validation

• Required pull-request checks pass — test run 33945766280 passed; notify was skipped. The source image publication also completed successfully in images buildah run 33945620450.
• Generated or centrally distributed files were regenerated by their owning automation, not hand-edited — none changed.

No local Kubernetes, Kustomize, SOPS, OpenTofu, or live-system operation was run or claimed. CI is the validation authority.

Impact and rollout

Producer: makeitworkcloud/images main commit caa3224f9c1a8f64c8f93c9fb1662bebf64189bc published the tested V2 bridge image.

Consumer changed: workloads/apps/opencode-sms-bridge-app.yaml updates the GitOps Application's immutable image tag only. Chart version, application source, destination, sync policy, Secret references, and Twilio callback configuration are unchanged.

Delivery stages: this PR authors desired state only. It does not select a live revision, prove Argo reconciliation, establish workload health, or prove SMS behavior. After passing CI and separately authorized merge, the existing automated sync workflow may submit this revision; then verify root and child Application reconciliation, resource health, and one approved-source text-only SMS round trip separately.

Rollback: select the prior reviewed immutable image through a separate GitOps PR. Do not patch the Application or workload live.

Safety and secrets

• Contains no plaintext secrets, decrypted SOPS values, state files, kubeconfigs, tokens, or private endpoints.
• No local OpenTofu init/plan/apply/destroy/import/state operations were run or claimed — plans come from pull-request checks.
• Breaking or irreversible effects are described above with rollback notes.

GitHub Advanced Security secret scanning is unavailable for this repository; the one-line tag change was manually inspected. AI-assisted change: an OpenCode agent materially produced this change; reviewers should verify the immutable source tag, passing CI, and staged rollout boundaries before merge.