Report security issues through GitHub private vulnerability reporting for NDDev-it-com/nddev-opencode-app.

Do not include provider API keys, OpenCode auth files, private repository content, or live user configuration in reports unless explicitly requested in a private channel.