In opencode you can get granular, allow `git log *`, deny `git add *` and `git commit *`