feat: migrate from Cedar to SpiceDB authorization system

This is a major architectural change that replaces the Cedar policy-based
authorization system with SpiceDB's relation-based authorization.

Key changes:

- Migrate from Rust to Go implementation
- Replace Cedar policies with SpiceDB schema and relationships
- Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks
- Update build system and dependencies for Go ecosystem
- Maintain Envoy integration for external authorization

This change enables more flexible permission modeling through SpiceDB's
Google Zanzibar inspired relation-based system, supporting complex
hierarchical permissions that were difficult to express in Cedar.

Breaking change: Existing Cedar policies and Rust-based configuration
will no longer work and need to be migrated to SpiceDB schema.

1 files changed, 0 insertions, 43 deletions

diff --git a/vendor/educe/src/common/path.rs b/vendor/educe/src/common/path.rs
deleted file mode 100644
index 18f80b24..00000000
--- a/vendor/educe/src/common/path.rs
+++ /dev/null
@@ -1,43 +0,0 @@
-use quote::ToTokens;
-use syn::{spanned::Spanned, Expr, Lit, LitStr, Meta, MetaNameValue, Path};
-
-#[inline]
-pub(crate) fn meta_name_value_2_path(name_value: &MetaNameValue) -> syn::Result<Path> {
-    match &name_value.value {
-        Expr::Lit(lit) => {
-            if let Lit::Str(lit) = &lit.lit {
-                return lit.parse();
-            }
-        },
-        Expr::Path(path) => return Ok(path.path.clone()),
-        _ => (),
-    }
-
-    Err(syn::Error::new(
-        name_value.value.span(),
-        format!("expected `{path} = Path`", path = path_to_string(&name_value.path)),
-    ))
-}
-
-#[inline]
-pub(crate) fn meta_2_path(meta: &Meta) -> syn::Result<Path> {
-    match &meta {
-        Meta::NameValue(name_value) => meta_name_value_2_path(name_value),
-        Meta::List(list) => {
-            if let Ok(lit) = list.parse_args::<LitStr>() {
-                lit.parse()
-            } else {
-                list.parse_args()
-            }
-        },
-        Meta::Path(path) => Err(syn::Error::new(
-            path.span(),
-            format!("expected `{path} = Path` or `{path}(Path)`", path = path_to_string(path)),
-        )),
-    }
-}
-
-#[inline]
-pub(crate) fn path_to_string(path: &Path) -> String {
-    path.into_token_stream().to_string().replace(' ', "")
-}