feat: migrate from Cedar to SpiceDB authorization system

This is a major architectural change that replaces the Cedar policy-based
authorization system with SpiceDB's relation-based authorization.

Key changes:

- Migrate from Rust to Go implementation
- Replace Cedar policies with SpiceDB schema and relationships
- Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks
- Update build system and dependencies for Go ecosystem
- Maintain Envoy integration for external authorization

This change enables more flexible permission modeling through SpiceDB's
Google Zanzibar inspired relation-based system, supporting complex
hierarchical permissions that were difficult to express in Cedar.

Breaking change: Existing Cedar policies and Rust-based configuration
will no longer work and need to be migrated to SpiceDB schema.

1 files changed, 0 insertions, 30 deletions

diff --git a/vendor/hyper/src/service/mod.rs b/vendor/hyper/src/service/mod.rs
deleted file mode 100644
index 28ffaddb..00000000
--- a/vendor/hyper/src/service/mod.rs
+++ /dev/null
@@ -1,30 +0,0 @@
-//! Asynchronous Services
-//!
-//! A [`Service`] is a trait representing an asynchronous
-//! function of a request to a response. It's similar to
-//! `async fn(Request) -> Result<Response, Error>`.
-//!
-//! The argument and return value isn't strictly required to be for HTTP.
-//! Therefore, hyper uses several "trait aliases" to reduce clutter around
-//! bounds. These are:
-//!
-//! - `HttpService`: This is blanketly implemented for all types that
-//!   implement `Service<http::Request<B1>, Response = http::Response<B2>>`.
-//!
-//! # HttpService
-//!
-//! In hyper, especially in the server setting, a `Service` is usually bound
-//! to a single connection. It defines how to respond to **all** requests that
-//! connection will receive.
-//!
-//! The helper [`service_fn`] should be sufficient for most cases, but
-//! if you need to implement `Service` for a type manually, you can follow the example
-//! in `service_struct_impl.rs`.
-
-mod http;
-mod service;
-mod util;
-
-pub use self::http::HttpService;
-pub use self::service::Service;
-pub use self::util::service_fn;