fix: restore auth and research variant

tests/test_opencode_deployment.py

@@ -13,6 +13,7 @@ def test_config_grants_all_agents_unrestricted_permissions() -> None:
     )
     assert config["mcp"]["codegraph"]["command"] == ["codegraph", "serve", "--mcp"]
     assert config["mcp"]["context7"]["url"] == "https://mcp.context7.com/mcp"
+    assert config["agent"]["research"]["variant"] == "{env:AGENTCI_RESEARCH_VARIANT}"
 
 
 def test_compose_removes_codex_sandbox_exceptions() -> None:
@@ -26,6 +27,8 @@ def test_compose_removes_codex_sandbox_exceptions() -> None:
     assert "opencode_home:/var/lib/opencode" in compose
     assert "HOME: /etc/opencode/home" in compose
     assert "OPENCODE_DISABLE_EXTERNAL_SKILLS" in compose
+    assert "OPENCODE_DISABLE_DEFAULT_PLUGINS" not in compose
+    assert "AGENTCI_RESEARCH_VARIANT: ${AGENTCI_RESEARCH_VARIANT:-high}" in compose
     assert compose.count("/run/agentci:mode=1777") == 2
     assert "AGENTCI_OPENCODE_VERSION: ${AGENTCI_OPENCODE_VERSION:-^1}" in compose
     assert "ARG AGENTCI_OPENCODE_VERSION=^1" in dockerfile