Background installs now require proven ownership of the executable, run
with the instance's own environment, pin the checked version instead of
@latest, install a shared installation once per pass and refresh its
sibling instances. Mise data directories stay manual-only and OpenCode
refreshes its advisory after an update.