feat: migrate from Cedar to SpiceDB authorization system

This is a major architectural change that replaces the Cedar policy-based
authorization system with SpiceDB's relation-based authorization.

Key changes:

- Migrate from Rust to Go implementation
- Replace Cedar policies with SpiceDB schema and relationships
- Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks
- Update build system and dependencies for Go ecosystem
- Maintain Envoy integration for external authorization

This change enables more flexible permission modeling through SpiceDB's
Google Zanzibar inspired relation-based system, supporting complex
hierarchical permissions that were difficult to express in Cedar.

Breaking change: Existing Cedar policies and Rust-based configuration
will no longer work and need to be migrated to SpiceDB schema.

1 files changed, 0 insertions, 78 deletions

diff --git a/vendor/arrayvec/benches/extend.rs b/vendor/arrayvec/benches/extend.rs
deleted file mode 100644
index 05797176..00000000
--- a/vendor/arrayvec/benches/extend.rs
+++ /dev/null
@@ -1,78 +0,0 @@
-
-extern crate arrayvec;
-#[macro_use] extern crate bencher;
-
-use std::io::Write;
-
-use arrayvec::ArrayVec;
-
-use bencher::Bencher;
-use bencher::black_box;
-
-fn extend_with_constant(b: &mut Bencher) {
-    let mut v = ArrayVec::<[u8; 512]>::new();
-    let cap = v.capacity();
-    b.iter(|| {
-        v.clear();
-        let constant = black_box(1);
-        v.extend((0..cap).map(move |_| constant));
-        v[511]
-    });
-    b.bytes = v.capacity() as u64;
-}
-
-fn extend_with_range(b: &mut Bencher) {
-    let mut v = ArrayVec::<[u8; 512]>::new();
-    let cap = v.capacity();
-    b.iter(|| {
-        v.clear();
-        let range = 0..cap;
-        v.extend(range.map(|x| black_box(x as _)));
-        v[511]
-    });
-    b.bytes = v.capacity() as u64;
-}
-
-fn extend_with_slice(b: &mut Bencher) {
-    let mut v = ArrayVec::<[u8; 512]>::new();
-    let data = [1; 512];
-    b.iter(|| {
-        v.clear();
-        let iter = data.iter().map(|&x| x);
-        v.extend(iter);
-        v[511]
-    });
-    b.bytes = v.capacity() as u64;
-}
-
-fn extend_with_write(b: &mut Bencher) {
-    let mut v = ArrayVec::<[u8; 512]>::new();
-    let data = [1; 512];
-    b.iter(|| {
-        v.clear();
-        v.write(&data[..]).ok();
-        v[511]
-    });
-    b.bytes = v.capacity() as u64;
-}
-
-fn extend_from_slice(b: &mut Bencher) {
-    let mut v = ArrayVec::<[u8; 512]>::new();
-    let data = [1; 512];
-    b.iter(|| {
-        v.clear();
-        v.try_extend_from_slice(&data).ok();
-        v[511]
-    });
-    b.bytes = v.capacity() as u64;
-}
-
-benchmark_group!(benches,
-                 extend_with_constant,
-                 extend_with_range,
-                 extend_with_slice,
-                 extend_with_write,
-                 extend_from_slice
-);
-
-benchmark_main!(benches);