feat: migrate from Cedar to SpiceDB authorization system

This is a major architectural change that replaces the Cedar policy-based
authorization system with SpiceDB's relation-based authorization.

Key changes:

- Migrate from Rust to Go implementation
- Replace Cedar policies with SpiceDB schema and relationships
- Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks
- Update build system and dependencies for Go ecosystem
- Maintain Envoy integration for external authorization

This change enables more flexible permission modeling through SpiceDB's
Google Zanzibar inspired relation-based system, supporting complex
hierarchical permissions that were difficult to express in Cedar.

Breaking change: Existing Cedar policies and Rust-based configuration
will no longer work and need to be migrated to SpiceDB schema.

1 files changed, 0 insertions, 39 deletions

diff --git a/vendor/logos-codegen/src/generator/rope.rs b/vendor/logos-codegen/src/generator/rope.rs
deleted file mode 100644
index ae3b07ad..00000000
--- a/vendor/logos-codegen/src/generator/rope.rs
+++ /dev/null
@@ -1,39 +0,0 @@
-use proc_macro2::TokenStream;
-use quote::quote;
-
-use crate::generator::{Context, Generator};
-use crate::graph::Rope;
-
-impl Generator<'_> {
-    pub fn generate_rope(&mut self, rope: &Rope, mut ctx: Context) -> TokenStream {
-        let miss = ctx.miss(rope.miss.first(), self);
-        let read = ctx.read(rope.pattern.len());
-        let then = self.goto(rope.then, ctx.advance(rope.pattern.len()));
-
-        let pat = match rope.pattern.to_bytes() {
-            Some(bytes) => byte_slice_literal(&bytes),
-            None => {
-                let ranges = rope.pattern.iter();
-
-                quote!([#(#ranges),*])
-            }
-        };
-
-        quote! {
-            match #read {
-                Some(#pat) => #then,
-                _ => #miss,
-            }
-        }
-    }
-}
-
-fn byte_slice_literal(bytes: &[u8]) -> TokenStream {
-    if bytes.iter().any(|&b| !(0x20..0x7F).contains(&b)) {
-        return quote!(&[#(#bytes),*]);
-    }
-
-    let slice = std::str::from_utf8(bytes).unwrap();
-
-    syn::parse_str(&format!("b{:?}", slice)).unwrap()
-}