fix: delete npm allow-scripts restriction before install

The node:24-trixie base image has npm configured with a restricted
allowScripts list, preventing opencode-ai's postinstall from running.
Delete the allow-scripts config before installing packages to restore
legacy npm behavior where all scripts are allowed.

Fixes: opencode-ai postinstall script was not run → opencode --version fails

Dockerfile

@@ -1,10 +1,9 @@
-FROM node:26-trixie
+FROM node:24-trixie
 
 ENV NPM_CONFIG_UPDATE_NOTIFIER=false \
   NPM_CONFIG_LOGLEVEL=warn \
   NODE_ENV=production
 
-
 RUN apt-get update && \
     apt-get upgrade -y --no-install-recommends ca-certificates && \
     rm -rf /var/lib/apt/lists/* && \
@@ -12,11 +11,9 @@ RUN apt-get update && \
     userdel -r node; \
     groupadd -g 1000 opencode; \
     useradd -m -u 1000 -g 1000 -s /usr/bin/bash opencode; \
+    npm config delete allow-scripts && \
     npm update -g --no-fund --no-audit && \
-    npm install -g --no-fund --no-audit --ignore-scripts n2-soul@9.0.9 && \
+    npm install -g --no-fund --no-audit opencode-ai@1.17.13 n2-soul@9.0.9 && \
-    npm install -g --no-fund --no-audit --allow-scripts=better-sqlite3 better-sqlite3@12.11.1 && \
-    rm -rf /usr/local/lib/node_modules/n2-soul/node_modules/better-sqlite3 && \
-    npm install -g --no-fund --no-audit --allow-scripts=opencode-ai opencode-ai@1.17.18 && \
     npm cache clean --force && \
     chown -R 1000:1000 /usr/local/lib/node_modules/n2-soul/