[UPDATE][opencode][1.0.27] Upgrade OpenCode to v1.18.31 (beclab/opencode:1.18.31.1). Keep nginx health checks local. Bind the Docker API to loopback with explicit TLS settings - #3632