feat: migrate from Cedar to SpiceDB authorization system

This is a major architectural change that replaces the Cedar policy-based
authorization system with SpiceDB's relation-based authorization.

Key changes:

- Migrate from Rust to Go implementation
- Replace Cedar policies with SpiceDB schema and relationships
- Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks
- Update build system and dependencies for Go ecosystem
- Maintain Envoy integration for external authorization

This change enables more flexible permission modeling through SpiceDB's
Google Zanzibar inspired relation-based system, supporting complex
hierarchical permissions that were difficult to express in Cedar.

Breaking change: Existing Cedar policies and Rust-based configuration
will no longer work and need to be migrated to SpiceDB schema.

1 files changed, 0 insertions, 57 deletions

diff --git a/vendor/enum-ordinalize-derive/src/int_wrapper.rs b/vendor/enum-ordinalize-derive/src/int_wrapper.rs
deleted file mode 100644
index 3747325d..00000000
--- a/vendor/enum-ordinalize-derive/src/int_wrapper.rs
+++ /dev/null
@@ -1,57 +0,0 @@
-use proc_macro2::{Literal, TokenStream};
-use quote::{quote, ToTokens, TokenStreamExt};
-use syn::Expr;
-
-use crate::int128::Int128;
-
-pub(crate) enum IntWrapper {
-    Integer(Int128),
-    Constant(Expr, usize),
-}
-
-impl From<Int128> for IntWrapper {
-    #[inline]
-    fn from(v: Int128) -> IntWrapper {
-        Self::Integer(v)
-    }
-}
-
-impl From<i128> for IntWrapper {
-    #[inline]
-    fn from(v: i128) -> IntWrapper {
-        Self::Integer(Int128::from(v))
-    }
-}
-
-impl From<(&Expr, usize)> for IntWrapper {
-    #[inline]
-    fn from((expr, counter): (&Expr, usize)) -> IntWrapper {
-        Self::Constant(expr.clone(), counter)
-    }
-}
-
-impl ToTokens for IntWrapper {
-    #[inline]
-    fn to_tokens(&self, tokens: &mut TokenStream) {
-        match self {
-            Self::Integer(v) => {
-                let lit = match v {
-                    Int128::Signed(i) => Literal::i128_unsuffixed(*i),
-                    Int128::Unsigned(u) => Literal::u128_unsuffixed(*u),
-                };
-
-                tokens.append(lit);
-            },
-            Self::Constant(expr, counter) => {
-                let counter = *counter;
-
-                if counter > 0 {
-                    tokens.extend(quote!(#expr +));
-                    tokens.append(Literal::usize_unsuffixed(counter));
-                } else {
-                    tokens.extend(quote!(#expr));
-                }
-            },
-        }
-    }
-}