Add opencode bot as a trusted collaborator

[samcday]

The pr_target CI in GHA is currently refusing to run for PRs opened by the opencode-agent bot. The repo's permissions are being used to make the decision. Since opencode-agent itself only responds to authorized parties, I think we can let it run CI by default.