feat: migrate from Cedar to SpiceDB authorization system

This is a major architectural change that replaces the Cedar policy-based
authorization system with SpiceDB's relation-based authorization.

Key changes:

- Migrate from Rust to Go implementation
- Replace Cedar policies with SpiceDB schema and relationships
- Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks
- Update build system and dependencies for Go ecosystem
- Maintain Envoy integration for external authorization

This change enables more flexible permission modeling through SpiceDB's
Google Zanzibar inspired relation-based system, supporting complex
hierarchical permissions that were difficult to express in Cedar.

Breaking change: Existing Cedar policies and Rust-based configuration
will no longer work and need to be migrated to SpiceDB schema.

1 files changed, 0 insertions, 28 deletions

diff --git a/vendor/overload/src/binary.rs b/vendor/overload/src/binary.rs
deleted file mode 100644
index b4c781bf..00000000
--- a/vendor/overload/src/binary.rs
+++ /dev/null
@@ -1,28 +0,0 @@
-#[doc(hidden)]

-#[macro_export(local_inner_macros)]

-macro_rules! _overload_binary {

-    (+, $($t:tt)+) => (_overload_binary_internal!(Add, add, $($t)+););

-    (-, $($t:tt)+) => (_overload_binary_internal!(Sub, sub, $($t)+););

-    (*, $($t:tt)+) => (_overload_binary_internal!(Mul, mul, $($t)+););

-    (/, $($t:tt)+) => (_overload_binary_internal!(Div, div, $($t)+););

-    (%, $($t:tt)+) => (_overload_binary_internal!(Rem, rem, $($t)+););

-    (&, $($t:tt)+) => (_overload_binary_internal!(BitAnd, bitand, $($t)+););

-    (|, $($t:tt)+) => (_overload_binary_internal!(BitOr, bitor, $($t)+););

-    (^, $($t:tt)+) => (_overload_binary_internal!(BitXor, bitxor, $($t)+););

-    (<<, $($t:tt)+) => (_overload_binary_internal!(Shl, shl, $($t)+););

-    (>>, $($t:tt)+) => (_overload_binary_internal!(Shr, shr, $($t)+););

-}

-

-#[doc(hidden)]

-#[macro_export(local_inner_macros)]

-macro_rules! _overload_binary_internal {

-    ($op_trait:ident, $op_fn:ident, $li:ident, $lt:ty, $ri:ident, $rt:ty, $out:ty, $body:block) => (

-        impl ops::$op_trait<$rt> for $lt {

-            type Output = $out;

-            fn $op_fn(self, $ri: $rt) -> Self::Output {

-                let $li = self;

-                $body

-            }

-        }

-    );

-}