feat: migrate from Cedar to SpiceDB authorization system

This is a major architectural change that replaces the Cedar policy-based
authorization system with SpiceDB's relation-based authorization.

Key changes:

- Migrate from Rust to Go implementation
- Replace Cedar policies with SpiceDB schema and relationships
- Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks
- Update build system and dependencies for Go ecosystem
- Maintain Envoy integration for external authorization

This change enables more flexible permission modeling through SpiceDB's
Google Zanzibar inspired relation-based system, supporting complex
hierarchical permissions that were difficult to express in Cedar.

Breaking change: Existing Cedar policies and Rust-based configuration
will no longer work and need to be migrated to SpiceDB schema.

2 files changed, 0 insertions, 168 deletions

diff --git a/vendor/arrayvec/benches/arraystring.rs b/vendor/arrayvec/benches/arraystring.rs
deleted file mode 100644
index 9cff5875..00000000
--- a/vendor/arrayvec/benches/arraystring.rs
+++ /dev/null
@@ -1,90 +0,0 @@
-
-extern crate arrayvec;
-#[macro_use] extern crate bencher;
-
-use arrayvec::ArrayString;
-
-use bencher::Bencher;
-
-fn try_push_c(b: &mut Bencher) {
-    let mut v = ArrayString::<[u8; 512]>::new();
-    b.iter(|| {
-        v.clear();
-        while v.try_push('c').is_ok() {
-        }
-        v.len()
-    });
-    b.bytes = v.capacity() as u64;
-}
-
-fn try_push_alpha(b: &mut Bencher) {
-    let mut v = ArrayString::<[u8; 512]>::new();
-    b.iter(|| {
-        v.clear();
-        while v.try_push('α').is_ok() {
-        }
-        v.len()
-    });
-    b.bytes = v.capacity() as u64;
-}
-
-// Yes, pushing a string char-by-char is slow. Use .push_str.
-fn try_push_string(b: &mut Bencher) {
-    let mut v = ArrayString::<[u8; 512]>::new();
-    let input = "abcαβγ“”";
-    b.iter(|| {
-        v.clear();
-        for ch in input.chars().cycle() {
-            if !v.try_push(ch).is_ok() {
-                break;
-            }
-        }
-        v.len()
-    });
-    b.bytes = v.capacity() as u64;
-}
-
-fn push_c(b: &mut Bencher) {
-    let mut v = ArrayString::<[u8; 512]>::new();
-    b.iter(|| {
-        v.clear();
-        while !v.is_full() {
-            v.push('c');
-        }
-        v.len()
-    });
-    b.bytes = v.capacity() as u64;
-}
-
-fn push_alpha(b: &mut Bencher) {
-    let mut v = ArrayString::<[u8; 512]>::new();
-    b.iter(|| {
-        v.clear();
-        while !v.is_full() {
-            v.push('α');
-        }
-        v.len()
-    });
-    b.bytes = v.capacity() as u64;
-}
-
-fn push_string(b: &mut Bencher) {
-    let mut v = ArrayString::<[u8; 512]>::new();
-    let input = "abcαβγ“”";
-    b.iter(|| {
-        v.clear();
-        for ch in input.chars().cycle() {
-            if !v.is_full() {
-                v.push(ch);
-            } else {
-                break;
-            }
-        }
-        v.len()
-    });
-    b.bytes = v.capacity() as u64;
-}
-
-benchmark_group!(benches, try_push_c, try_push_alpha, try_push_string, push_c,
-                 push_alpha, push_string);
-benchmark_main!(benches);
diff --git a/vendor/arrayvec/benches/extend.rs b/vendor/arrayvec/benches/extend.rs
deleted file mode 100644
index 05797176..00000000
--- a/vendor/arrayvec/benches/extend.rs
+++ /dev/null
@@ -1,78 +0,0 @@
-
-extern crate arrayvec;
-#[macro_use] extern crate bencher;
-
-use std::io::Write;
-
-use arrayvec::ArrayVec;
-
-use bencher::Bencher;
-use bencher::black_box;
-
-fn extend_with_constant(b: &mut Bencher) {
-    let mut v = ArrayVec::<[u8; 512]>::new();
-    let cap = v.capacity();
-    b.iter(|| {
-        v.clear();
-        let constant = black_box(1);
-        v.extend((0..cap).map(move |_| constant));
-        v[511]
-    });
-    b.bytes = v.capacity() as u64;
-}
-
-fn extend_with_range(b: &mut Bencher) {
-    let mut v = ArrayVec::<[u8; 512]>::new();
-    let cap = v.capacity();
-    b.iter(|| {
-        v.clear();
-        let range = 0..cap;
-        v.extend(range.map(|x| black_box(x as _)));
-        v[511]
-    });
-    b.bytes = v.capacity() as u64;
-}
-
-fn extend_with_slice(b: &mut Bencher) {
-    let mut v = ArrayVec::<[u8; 512]>::new();
-    let data = [1; 512];
-    b.iter(|| {
-        v.clear();
-        let iter = data.iter().map(|&x| x);
-        v.extend(iter);
-        v[511]
-    });
-    b.bytes = v.capacity() as u64;
-}
-
-fn extend_with_write(b: &mut Bencher) {
-    let mut v = ArrayVec::<[u8; 512]>::new();
-    let data = [1; 512];
-    b.iter(|| {
-        v.clear();
-        v.write(&data[..]).ok();
-        v[511]
-    });
-    b.bytes = v.capacity() as u64;
-}
-
-fn extend_from_slice(b: &mut Bencher) {
-    let mut v = ArrayVec::<[u8; 512]>::new();
-    let data = [1; 512];
-    b.iter(|| {
-        v.clear();
-        v.try_extend_from_slice(&data).ok();
-        v[511]
-    });
-    b.bytes = v.capacity() as u64;
-}
-
-benchmark_group!(benches,
-                 extend_with_constant,
-                 extend_with_range,
-                 extend_with_slice,
-                 extend_with_write,
-                 extend_from_slice
-);
-
-benchmark_main!(benches);