fix: pin opencode action, refine trigger, update docs

Co-Authored-By: Afonso Dutra Nogueira Filho <afonsoft@gmail.com>

Author: devin-ai-integration[bot]

.agents/WORKFLOWS.md

@@ -83,3 +83,5 @@ dotnet test QRCoder.Core.sln --configuration Release --collect:"XPlat Code Cover
 | Tag de release | `publish-all.yml` |
 | Push em `main` | `auto-pr-from-main.yml` |
 | Schedule | `security-scan.yml` |
+| Comentário `/oc` ou `/opencode` | `opencode.yml` |
+| Label `fix-me` em issue/PR | `opencode-auto-fix.yml` |

.github/workflows/opencode-auto-fix.yml

@@ -25,7 +25,7 @@ jobs:
           persist-credentials: false
 
       - name: Run OpenCode
-        uses: anomalyco/opencode/github@latest
+        uses: anomalyco/opencode/github@b1fc8113948b518835c2a39ece49553cffe9b30c # v1.17.18
         env:
           OMNIROUTE_API_KEY: ${{ secrets.OMNIROUTE_API_KEY }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/opencode.yml

@@ -9,8 +9,13 @@ on:
 jobs:
   opencode:
     if: |
-      contains(github.event.comment.body, '/oc') ||
-      contains(github.event.comment.body, '/opencode')
+      contains(fromJSON('["OWNER", "COLLABORATOR", "MEMBER"]'), github.event.comment.author_association) &&
+      (
+        github.event.comment.body == '/oc' ||
+        startsWith(github.event.comment.body, '/oc ') ||
+        github.event.comment.body == '/opencode' ||
+        startsWith(github.event.comment.body, '/opencode ')
+      )
     runs-on: ubuntu-latest
     permissions:
       id-token: write
@@ -27,7 +32,7 @@ jobs:
           persist-credentials: false
 
       - name: Run OpenCode
-        uses: anomalyco/opencode/github@latest
+        uses: anomalyco/opencode/github@b1fc8113948b518835c2a39ece49553cffe9b30c # v1.17.18
         env:
           OMNIROUTE_API_KEY: ${{ secrets.OMNIROUTE_API_KEY }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}