fix(opencode-sms-bridge): select error-code image

[xnoto]

Summary

Select the published bridge image 956f2c8b7707e867b8d1cd6672d146bf0f1e6b16, which emits only bounded PII-safe OpenCode error codes.

Fixes #

None — owner-authorized diagnostic rollout.

Type of change

• Bug fix
• Feature / enhancement
• Documentation
• Infrastructure (OpenTofu root or module)
• GitOps desired state (manifests, kustomize, charts, SOPS/KSOPS secrets)
• Container image
• CI / reusable workflow
• Refactor / cleanup
• Breaking change

Validation

• Required pull-request checks pass — pending.
• Generated or centrally distributed files were regenerated by their owning automation, not hand-edited — none changed.

No local Kubernetes, Kustomize, SOPS, or live-system operations were run.

Impact and rollout

Updates only the immutable image tag. After separately authorized merge, automated GitOps may reconcile; then perform one approved-source text-only test to read the bounded error code. Roll back through a reviewed GitOps image-selection PR.

Safety and secrets

• Contains no plaintext secrets, decrypted values, state, kubeconfigs, tokens, or private endpoints.
• No local OpenTofu operations were run or claimed.
• Breaking or irreversible effects are described above with rollback notes.

AI-assisted change; reviewers should verify the source tag, CI, and staged delivery.