sudo and isolated /tmp handoff

When no new privileges blocks sudo, immediately provide ordered host-side commands and verify their effects after Burak Yigit Kaya runs them. Trap: staging /tmp/opencode/... in the tool sandbox and asking the host to install it looks valid because the paths match, but the filesystems are isolated; create the file host-side with printf, tee, or a heredoc, or explicitly transfer it.