feat: RBAC checks, ./cli export, adapter-utils range, models.ts

- Add secrets (create/delete/get) and persistentvolumeclaims (get) RBAC checks to testEnvironment
- Add ./cli export and picocolors dependency to package.json
- Change @paperclipai/adapter-utils peer dep to >= range
- Add src/server/models.ts with listK8sModels() returning OpenCode provider-prefixed model IDs
- Wire listModels into ServerAdapterModule (replaces static undefined models field)

Co-Authored-By: Paperclip <noreply@paperclip.ing>

src/server/models.ts

@@ -0,0 +1,15 @@
+import type { AdapterModel } from "@paperclipai/adapter-utils";
+
+const MODELS: AdapterModel[] = [
+  { id: "anthropic/claude-opus-4-7", label: "Claude Opus 4.7" },
+  { id: "anthropic/claude-sonnet-4-6", label: "Claude Sonnet 4.6" },
+  { id: "anthropic/claude-haiku-4-5", label: "Claude Haiku 4.5" },
+  { id: "openai/gpt-4o", label: "GPT-4o" },
+  { id: "openai/gpt-4o-mini", label: "GPT-4o mini" },
+  { id: "google/gemini-2.5-pro", label: "Gemini 2.5 Pro" },
+  { id: "google/gemini-2.5-flash", label: "Gemini 2.5 Flash" },
+];
+
+export async function listK8sModels(): Promise<AdapterModel[]> {
+  return MODELS;
+}