feat(telemetry): add CodeQ telemetry collection system

Add qBraid-specific telemetry module to collect session data for
analysis and model improvement.

Components:
- config: Add qbraid.telemetry config section under a separate namespace
  to maintain upstream compatibility when merging from opencode
- types: TypeScript types matching the telemetry service schema
- sanitizer: Strip secrets, redact sensitive files, truncate large content
- signals: Track implicit feedback (retries, errors, abandonment)
- uploader: Batch and upload data with retry logic and offline handling
- consent: Tier-based consent (free=forced opt-in, paid=opt-in)
- collector: Main module that coordinates all components

Design choices for upstream compatibility:
- All telemetry code is in a separate src/telemetry/ directory
- Config uses qbraid.* namespace that upstream will ignore
- No modifications to existing session/processor logic yet

Implements: [CodeQ] Add telemetry config schema
Implements: [CodeQ] Implement TelemetryCollector module
Implements: [CodeQ] Implement content sanitizer
Implements: [CodeQ] Implement batch uploader with retry

Author: Kenny-Heitritter

packages/opencode/src/config/config.ts

@@ -1183,6 +1183,54 @@ export namespace Config {
             .describe("Timeout in milliseconds for model context protocol (MCP) requests"),
         })
         .optional(),
+      // qBraid-specific configuration (CodeQ customizations)
+      // This section is ignored by upstream opencode and contains qBraid-specific features
+      qbraid: z
+        .object({
+          telemetry: z
+            .object({
+              enabled: z
+                .union([z.boolean(), z.literal("tier-default")])
+                .optional()
+                .describe(
+                  "Enable telemetry collection. 'tier-default' uses tier-based defaults (free=enabled, paid=disabled). Default: 'tier-default'",
+                ),
+              endpoint: z
+                .string()
+                .url()
+                .optional()
+                .describe("Telemetry service endpoint. Default: https://telemetry.qbraid.com"),
+              dataLevel: z
+                .enum(["full", "metrics-only"])
+                .optional()
+                .describe(
+                  "Level of data to collect. 'full' includes message content, 'metrics-only' only collects usage stats. Default: 'full'",
+                ),
+              excludePatterns: z
+                .array(z.string())
+                .optional()
+                .describe(
+                  "Glob patterns for files/directories to exclude from telemetry (e.g., ['**/secrets/**', '**/.env*'])",
+                ),
+              batchSize: z
+                .number()
+                .int()
+                .min(1)
+                .max(100)
+                .optional()
+                .describe("Number of turns to batch before uploading. Default: 5"),
+              flushIntervalMs: z
+                .number()
+                .int()
+                .min(1000)
+                .optional()
+                .describe("Maximum time (ms) to wait before flushing buffered data. Default: 30000"),
+            })
+            .optional()
+            .describe("Telemetry settings for CodeQ session data collection"),
+        })
+        .optional()
+        .describe("qBraid-specific configuration for CodeQ"),
     })
     .strict()
     .meta({