chore(opencode): bump chart to 0.5.4

[makeitworkbot]

Summary

Select published opencode-server chart 0.5.4 from charts PR #129, and coordinate the existing exact chart/API assertion to (0.5.4, 2). Exporter API selector remains 2. No test relaxation, workflow behavior, image, Secret, RBAC, network or pilot changes.

Validation

• Producer publication and updater passed run 38445170845.
• Initial consumer test failed its stale chart/API assertion; this follow-up corrects only the expected chart version.
• Independent adversarial and infra-security reviews ADVANCE; DevOps ADVANCE explicitly bounded to edited assertion and supplied unchanged delivery contract, not overall workflow approval. Primary inspected full workflow and exact two-file diff. No remaining Critical/High finding in scoped change.
• Required PR test and logging checks passed in run 38446019338 at 07cfd08613e64ce2505c3afa96e6d7913d970908. No local checks claimed.

Impact and rollout

Owner authorized proceeding with consumer coordination. Existing generated PR auto-merge is enabled and check-gated. A merge runs main CI; successful main automatically requests root sync at the tested SHA, then gitops-workloads updates the opencode child. Root/child revision reconciliation, resource/pod health, delivered configuration and runtime behavior remain separately verified; no manual sync or live patch is performed. Recreate rollout may briefly interrupt the single-replica server. Image/appVersion 2.0.22 unchanged. Stored/client-selected sessions retain model precedence; new model entitlement, effective effort, inference/tool-call success and comparative quality/cost are not established by static CI.

Rollback requires a reviewed GitOps pin and matching exact assertion to a published prior version; no retagging, image downgrade or database operation.

Safety

No plaintext secrets, decrypted values, credentials, state or kubeconfigs retrieved or changed. AI-assisted scoped follow-up; generated chart pin remains publisher-owned.