release: prepare opencode toolkit 0.1.0-rc.1

docs/IMPLEMENTATION-PLAN.md

@@ -139,21 +139,21 @@ provider-backed agent delegation and skill behavior remain unverified.
 runtime; config collisions are handled or reported before writes; the V2 plugin
 and its custom tool are confirmed active.
 
-### Phase 5 — Document and release (release candidate prepared; publication pending)
+### Phase 5 — Document and release (repository pre-release in progress)
 
 - Document scope, installation, update/uninstall, compatibility, provenance,
   and known limitations.
 - Run deterministic checks and security review before release.
 - Confirm package/repository names and get explicit approval before publishing.
 
-**Progress:** README now documents checkout installation, tarball verification,
-update/uninstall behavior, compatibility, and credential-free checks. A manual
-pre-release review of installer paths, ownership, JSONC edits, symlinks, and
-failure behavior found no release blocker for trusted project-local use; its
-filesystem and provider-backed limitations are recorded in
-[`SECURITY-REVIEW.md`](SECURITY-REVIEW.md). Typecheck, all 16 tests, coverage
-(87.4% lines), and package dry-run passed. Publication remains blocked on
-explicit confirmation of the package/repository identity and destination.
+**Progress:** README now documents installing directly from the repository's
+pre-release tarball, as well as updating and uninstalling. A manual pre-release
+review of installer paths, ownership, JSONC edits, symlinks, and failure behavior
+found no release blocker for trusted project-local use; filesystem and
+provider-backed limitations are recorded in [`SECURITY-REVIEW.md`](SECURITY-REVIEW.md).
+Typecheck, all 16 tests, coverage (87.4% lines), and package dry-run passed.
+The `0.1.0-rc.1` tarball and repository release still need publication and a
+clean-project install check.
 
 **Acceptance:** another user can install from documented instructions and
 verify the deterministic behavior without credentials.