fix(portal): flatten OpenCode link to homepage

[xnoto]

Summary

Change only the OpenCode resource href in makeitwork.cloud/index.html from the obsolete V1 directory/session route to https://opencode.makeitwork.cloud/. Owner explicitly approved flattening the link after investigation. This intentionally no longer selects /home/opencode or creates a session.

Type of change

• Bug fix
• Feature / enhancement
• Documentation
• Infrastructure (OpenTofu root or module)
• GitOps desired state (manifests, kustomize, charts, SOPS/KSOPS secrets)
• Container image
• CI / reusable workflow
• Refactor / cleanup
• Breaking change

Validation

• Required pull-request checks pass
• Generated or centrally distributed files were regenerated by their owning automation, not hand-edited — not applicable; static authored HTML only.

Verified GitHub commit diff: exactly one href replacement, one addition/one deletion. Independent supplied-diff review found no blocker. PR CI runs existing pre-commit checks and service-worker syntax check; these do not prove authenticated OpenCode navigation. No local checks or live session creation performed.

Impact and rollout

Producer: authored static HTML, deployed as-is. Consumer: portal browser navigation. Link label/icon and all other files unchanged. No generated copies, dependency pins, upstream OpenCode changes, image/chart publication, or GitOps selection/reconciliation changes.

Stages: authored on scoped branch; PR validation automatic; merge confirmation-gated; after an approved main merge, existing workflow automatically validates and syncs BOTH public and onion sites to S3 with delete semantics, then purges Cloudflare zone cache. Production publication and browser functional verification have not occurred. Do not merge or dispatch without explicit owner confirmation.

Behavior change: opens OpenCode Home, not a directory-targeted fresh session. To roll back, revert this single href change through a reviewed PR and separately approved production deployment; the old route remains incompatible with the inspected V2 version.

Safety and secrets

• Contains no plaintext secrets, decrypted SOPS values, state files, kubeconfigs, tokens, or private endpoints
• No local OpenTofu init/plan/apply/destroy/import/state operations were run or claimed — plans come from pull-request checks
• Breaking or irreversible effects are described above with rollback notes

AI-assisted change and review.