feat(opencode): add mcp servers

home/modules/cli/opencode.nix

@@ -1,3 +1,41 @@
+{ config, ... }:
+
 {
-  programs.opencode.enable = true;
+  sops.secrets = {
+    "openrouter_api_key" = {};
+    "github_token" = {};
+    "context7_api_key" = {};
+  };
+
+  programs.opencode = {
+    enable = true;
+    settings = {
+      theme = "opencode";
+      provider = {
+        openrouter = {
+          options = {
+            apiKey = "{file:${config.sops.secrets."openrouter_api_key".path}}";
+          };
+        };
+      };
+      mcp = {
+        github = {
+          enabled = true;
+          type = "remote";
+          url = "https://api.githubcopilot.com/mcp/";
+          headers = {
+            Authorization = "Bearer {file:${config.sops.secrets."github_token".path}}";
+          };
+        };
+        context7 = {
+          enabled = true;
+          type = "remote";
+          url = "https://mcp.context7.com/mcp";
+          headers = {
+            "CONTEXT7_API_KEY" = "{file:${config.sops.secrets."context7_api_key".path}}";
+          };
+        };
+      };
+    };
+  };
 }

home/modules/cli/sops.nix

@@ -5,6 +5,4 @@
   sops.defaultSopsFormat = "yaml";
 
   sops.age.keyFile = "/home/toast/.config/sops/age/keys.txt";
-
-  sops.secrets."tailscale/authkey" = { };
 }