feat: migrate from Cedar to SpiceDB authorization system

This is a major architectural change that replaces the Cedar policy-based
authorization system with SpiceDB's relation-based authorization.

Key changes:

- Migrate from Rust to Go implementation
- Replace Cedar policies with SpiceDB schema and relationships
- Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks
- Update build system and dependencies for Go ecosystem
- Maintain Envoy integration for external authorization

This change enables more flexible permission modeling through SpiceDB's
Google Zanzibar inspired relation-based system, supporting complex
hierarchical permissions that were difficult to express in Cedar.

Breaking change: Existing Cedar policies and Rust-based configuration
will no longer work and need to be migrated to SpiceDB schema.

4 files changed, 0 insertions, 65 deletions

diff --git a/vendor/precomputed-hash/.cargo-checksum.json b/vendor/precomputed-hash/.cargo-checksum.json
deleted file mode 100644
index a41fee4e..00000000
--- a/vendor/precomputed-hash/.cargo-checksum.json
+++ /dev/null
@@ -1 +0,0 @@
-{"files":{"Cargo.toml":"594bc4437727edbf58c7cb9f88c3c1d80e89439dd4a505ef4771f9f344819386","LICENSE":"7ca6700600dfa9c9497bf5556365067daa802c871ea78239f129309c7a2048f7","src/lib.rs":"079a5f369a82b4573cca488a8c52a8427546e9050c89964a7b554215dd4da5f1"},"package":"925383efa346730478fb4838dbe9137d2a47675ad789c546d150a6e1dd4ab31c"}
\ No newline at end of file
diff --git a/vendor/precomputed-hash/Cargo.toml b/vendor/precomputed-hash/Cargo.toml
deleted file mode 100644
index 64acf0e4..00000000
--- a/vendor/precomputed-hash/Cargo.toml
+++ /dev/null
@@ -1,21 +0,0 @@
-# THIS FILE IS AUTOMATICALLY GENERATED BY CARGO
-#
-# When uploading crates to the registry Cargo will automatically
-# "normalize" Cargo.toml files for maximal compatibility
-# with all versions of Cargo and also rewrite `path` dependencies
-# to registry (e.g. crates.io) dependencies
-#
-# If you believe there's an error in this file please file an
-# issue against the rust-lang/cargo repository. If you're
-# editing this file be aware that the upstream Cargo.toml
-# will likely look very different (and much more reasonable)
-
-[package]
-name = "precomputed-hash"
-version = "0.1.1"
-authors = ["Emilio Cobos Álvarez <emilio@crisal.io>"]
-description = "A library intending to be a base dependency to expose a precomputed hash"
-license = "MIT"
-repository = "https://github.com/emilio/precomputed-hash"
-
-[dependencies]
diff --git a/vendor/precomputed-hash/LICENSE b/vendor/precomputed-hash/LICENSE
deleted file mode 100644
index c99e3b59..00000000
--- a/vendor/precomputed-hash/LICENSE
+++ /dev/null
@@ -1,21 +0,0 @@
-MIT License
-
-Copyright (c) 2017 Emilio Cobos Álvarez
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
diff --git a/vendor/precomputed-hash/src/lib.rs b/vendor/precomputed-hash/src/lib.rs
deleted file mode 100644
index 9cdb45d5..00000000
--- a/vendor/precomputed-hash/src/lib.rs
+++ /dev/null
@@ -1,22 +0,0 @@
-//! A base trait to expose a precomputed hash for a type.
-
-/// A trait to expose a precomputed hash for a type.
-pub trait PrecomputedHash {
-    // TODO(emilio): Perhaps an associated type would be on point here.
-
-    /// Return the precomputed hash for this item.
-    fn precomputed_hash(&self) -> u32;
-}
-
-// These are equivalent to the `std::Hash` impls.
-impl<'a, T: PrecomputedHash> PrecomputedHash for &'a T {
-    fn precomputed_hash(&self) -> u32 {
-        (**self).precomputed_hash()
-    }
-}
-
-impl<'a, T: PrecomputedHash> PrecomputedHash for &'a mut T {
-    fn precomputed_hash(&self) -> u32 {
-        (**self).precomputed_hash()
-    }
-}