I was using the OpenCode free model defaults. This was a test setup, so I didn't configure anything - toadbox just installs toad, which then lets me install and run OpenCode without any configuration.
Edit: digging around in a fresh container the default model I'm getting is `big-pickle`, and I have to assume that this is the one that decided to use that proxy.