When running `opencode attach` without `--dir`, the TUI session
previously used the server's process.cwd() as its working directory.
This changes the default to send the attaching client's cwd so the
session operates in the directory where the attach command was invoked.
Allow users to authenticate when attaching to a remote OpenCode session by supporting basic auth via a password flag or OPENCODE_SERVER_PASSWORD environment variable
