The open-source AI coding project OpenCode has notified a small number of users that API keys they used with external providers were exposed in a security breach.