release: prepare opencode toolkit 0.1.0-rc.1

TODO.md

@@ -25,9 +25,12 @@
   credentials, including idempotency and conservative uninstall checks.
 - [x] Perform and record a pre-release manual security review of installer paths,
   file ownership, configuration edits, and failure limitations.
+- [ ] Publish the `0.1.0-rc.1` tarball as a repository pre-release and verify the
+  direct installation URL from a clean project.
 - [ ] Add provider-backed verification after confirming credentials and model
   usage budget with the user.
-- [ ] Confirm repository/package names and decide whether to publish.
+- [ ] Decide whether to publish the package to npm; repository pre-releases do
+  not publish it to the npm registry.
 
 ## Follow-up