Expose OpenRouter Gemini 3.5 Flash in deployed guardrails profile #208

Summary

google/gemini-3.5-flash exists in the current OpenRouter catalog, but it was not visible in the deployed OpenCode model selector after PR #207.

Root cause

The model ID was present in the OpenRouter allowlist, but OpenCode builds model objects from models.dev. As of May 20, 2026, models.dev/api.json does not include google/gemini-3.5-flash, even though https://openrouter.ai/api/v1/models does. A whitelist entry alone therefore does not create a selectable model.

Acceptance criteria

• opencode models openrouter includes openrouter/google/gemini-3.5-flash.
• The local deploy wrapper still enters the guardrails profile and keeps fork-specific /auto and /plan support.
• bun typecheck from packages/opencode passes.
• Plugin/team tests still pass.