feat: migrate from Cedar to SpiceDB authorization system

This is a major architectural change that replaces the Cedar policy-based
authorization system with SpiceDB's relation-based authorization.

Key changes:

- Migrate from Rust to Go implementation
- Replace Cedar policies with SpiceDB schema and relationships
- Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks
- Update build system and dependencies for Go ecosystem
- Maintain Envoy integration for external authorization

This change enables more flexible permission modeling through SpiceDB's
Google Zanzibar inspired relation-based system, supporting complex
hierarchical permissions that were difficult to express in Cedar.

Breaking change: Existing Cedar policies and Rust-based configuration
will no longer work and need to be migrated to SpiceDB schema.

1 files changed, 0 insertions, 134 deletions

diff --git a/vendor/object/src/read/xcoff/comdat.rs b/vendor/object/src/read/xcoff/comdat.rs
deleted file mode 100644
index 142dd526..00000000
--- a/vendor/object/src/read/xcoff/comdat.rs
+++ /dev/null
@@ -1,134 +0,0 @@
-//! XCOFF doesn't support the COMDAT section.
-
-use core::fmt::Debug;
-
-use crate::read::{self, ComdatKind, ObjectComdat, ReadRef, Result, SectionIndex, SymbolIndex};
-use crate::xcoff;
-
-use super::{FileHeader, XcoffFile};
-
-/// An iterator for the COMDAT section groups in a [`XcoffFile32`](super::XcoffFile32).
-pub type XcoffComdatIterator32<'data, 'file, R = &'data [u8]> =
-    XcoffComdatIterator<'data, 'file, xcoff::FileHeader32, R>;
-/// An iterator for the COMDAT section groups in a [`XcoffFile64`](super::XcoffFile64).
-pub type XcoffComdatIterator64<'data, 'file, R = &'data [u8]> =
-    XcoffComdatIterator<'data, 'file, xcoff::FileHeader64, R>;
-
-/// An iterator for the COMDAT section groups in a [`XcoffFile`].
-///
-/// This is a stub that doesn't implement any functionality.
-#[derive(Debug)]
-pub struct XcoffComdatIterator<'data, 'file, Xcoff, R = &'data [u8]>
-where
-    Xcoff: FileHeader,
-    R: ReadRef<'data>,
-{
-    #[allow(unused)]
-    pub(crate) file: &'file XcoffFile<'data, Xcoff, R>,
-}
-
-impl<'data, 'file, Xcoff, R> Iterator for XcoffComdatIterator<'data, 'file, Xcoff, R>
-where
-    Xcoff: FileHeader,
-    R: ReadRef<'data>,
-{
-    type Item = XcoffComdat<'data, 'file, Xcoff, R>;
-
-    #[inline]
-    fn next(&mut self) -> Option<Self::Item> {
-        None
-    }
-}
-
-/// A COMDAT section group in a [`XcoffFile32`](super::XcoffFile32).
-pub type XcoffComdat32<'data, 'file, R = &'data [u8]> =
-    XcoffComdat<'data, 'file, xcoff::FileHeader32, R>;
-
-/// A COMDAT section group in a [`XcoffFile64`](super::XcoffFile64).
-pub type XcoffComdat64<'data, 'file, R = &'data [u8]> =
-    XcoffComdat<'data, 'file, xcoff::FileHeader64, R>;
-
-/// A COMDAT section group in a [`XcoffFile`].
-///
-/// This is a stub that doesn't implement any functionality.
-#[derive(Debug)]
-pub struct XcoffComdat<'data, 'file, Xcoff, R = &'data [u8]>
-where
-    Xcoff: FileHeader,
-    R: ReadRef<'data>,
-{
-    #[allow(unused)]
-    file: &'file XcoffFile<'data, Xcoff, R>,
-}
-
-impl<'data, 'file, Xcoff, R> read::private::Sealed for XcoffComdat<'data, 'file, Xcoff, R>
-where
-    Xcoff: FileHeader,
-    R: ReadRef<'data>,
-{
-}
-
-impl<'data, 'file, Xcoff, R> ObjectComdat<'data> for XcoffComdat<'data, 'file, Xcoff, R>
-where
-    Xcoff: FileHeader,
-    R: ReadRef<'data>,
-{
-    type SectionIterator = XcoffComdatSectionIterator<'data, 'file, Xcoff, R>;
-
-    #[inline]
-    fn kind(&self) -> ComdatKind {
-        unreachable!();
-    }
-
-    #[inline]
-    fn symbol(&self) -> SymbolIndex {
-        unreachable!();
-    }
-
-    #[inline]
-    fn name_bytes(&self) -> Result<&'data [u8]> {
-        unreachable!();
-    }
-
-    #[inline]
-    fn name(&self) -> Result<&'data str> {
-        unreachable!();
-    }
-
-    #[inline]
-    fn sections(&self) -> Self::SectionIterator {
-        unreachable!();
-    }
-}
-
-/// An iterator for the sections in a COMDAT section group in a [`XcoffFile32`](super::XcoffFile32).
-pub type XcoffComdatSectionIterator32<'data, 'file, R = &'data [u8]> =
-    XcoffComdatSectionIterator<'data, 'file, xcoff::FileHeader32, R>;
-/// An iterator for the sections in a COMDAT section group in a [`XcoffFile64`](super::XcoffFile64).
-pub type XcoffComdatSectionIterator64<'data, 'file, R = &'data [u8]> =
-    XcoffComdatSectionIterator<'data, 'file, xcoff::FileHeader64, R>;
-
-/// An iterator for the sections in a COMDAT section group in a [`XcoffFile`].
-///
-/// This is a stub that doesn't implement any functionality.
-#[derive(Debug)]
-pub struct XcoffComdatSectionIterator<'data, 'file, Xcoff, R = &'data [u8]>
-where
-    Xcoff: FileHeader,
-    R: ReadRef<'data>,
-{
-    #[allow(unused)]
-    file: &'file XcoffFile<'data, Xcoff, R>,
-}
-
-impl<'data, 'file, Xcoff, R> Iterator for XcoffComdatSectionIterator<'data, 'file, Xcoff, R>
-where
-    Xcoff: FileHeader,
-    R: ReadRef<'data>,
-{
-    type Item = SectionIndex;
-
-    fn next(&mut self) -> Option<Self::Item> {
-        None
-    }
-}