feat: migrate from Cedar to SpiceDB authorization system

This is a major architectural change that replaces the Cedar policy-based
authorization system with SpiceDB's relation-based authorization.

Key changes:

- Migrate from Rust to Go implementation
- Replace Cedar policies with SpiceDB schema and relationships
- Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks
- Update build system and dependencies for Go ecosystem
- Maintain Envoy integration for external authorization

This change enables more flexible permission modeling through SpiceDB's
Google Zanzibar inspired relation-based system, supporting complex
hierarchical permissions that were difficult to express in Cedar.

Breaking change: Existing Cedar policies and Rust-based configuration
will no longer work and need to be migrated to SpiceDB schema.

1 files changed, 0 insertions, 110 deletions

diff --git a/vendor/rustix/src/param/auxv.rs b/vendor/rustix/src/param/auxv.rs
deleted file mode 100644
index 2e502fdb..00000000
--- a/vendor/rustix/src/param/auxv.rs
+++ /dev/null
@@ -1,110 +0,0 @@
-use crate::backend;
-#[cfg(any(
-    linux_raw,
-    any(
-        all(target_os = "android", target_pointer_width = "64"),
-        target_os = "linux",
-    )
-))]
-use crate::ffi::CStr;
-
-/// `sysconf(_SC_PAGESIZE)`—Returns the process' page size.
-///
-/// Also known as `getpagesize`.
-///
-/// # References
-///  - [POSIX]
-///  - [Linux `sysconf`]
-///  - [Linux `getpagesize`]
-///
-/// [POSIX]: https://pubs.opengroup.org/onlinepubs/9799919799/functions/sysconf.html
-/// [Linux `sysconf`]: https://man7.org/linux/man-pages/man3/sysconf.3.html
-/// [Linux `getpagesize`]: https://man7.org/linux/man-pages/man2/getpagesize.2.html
-#[inline]
-#[doc(alias = "PAGESIZE")]
-#[doc(alias = "PAGE_SIZE")]
-#[doc(alias = "_SC_PAGESIZE")]
-#[doc(alias = "_SC_PAGE_SIZE")]
-#[doc(alias = "getpagesize")]
-pub fn page_size() -> usize {
-    backend::param::auxv::page_size()
-}
-
-/// `sysconf(_SC_CLK_TCK)`—Returns the process' clock ticks per second.
-///
-/// # References
-///  - [POSIX]
-///  - [Linux]
-///
-/// [POSIX]: https://pubs.opengroup.org/onlinepubs/9799919799/functions/sysconf.html
-/// [Linux]: https://man7.org/linux/man-pages/man3/sysconf.3.html
-#[cfg(not(any(target_os = "horizon", target_os = "vita", target_os = "wasi")))]
-#[inline]
-#[doc(alias = "_SC_CLK_TCK")]
-pub fn clock_ticks_per_second() -> u64 {
-    backend::param::auxv::clock_ticks_per_second()
-}
-
-/// `(getauxval(AT_HWCAP), getauxval(AT_HWCAP2)`—Returns the Linux "hwcap"
-/// data.
-///
-/// Return the Linux `AT_HWCAP` and `AT_HWCAP2` values passed to the
-/// current process. Returns 0 for each value if it is not available.
-///
-/// # References
-///  - [Linux]
-///
-/// [Linux]: https://man7.org/linux/man-pages/man3/getauxval.3.html
-#[cfg(any(
-    linux_raw,
-    any(
-        all(target_os = "android", target_pointer_width = "64"),
-        target_os = "linux",
-    )
-))]
-#[inline]
-pub fn linux_hwcap() -> (usize, usize) {
-    backend::param::auxv::linux_hwcap()
-}
-
-/// `getauxval(AT_MINSIGSTKSZ)`—Returns the Linux "minsigstksz" data.
-///
-/// Return the Linux `AT_MINSIGSTKSZ` value passed to the current process.
-/// Returns 0 if it is not available.
-///
-/// # References
-///  - [Linux]
-///
-/// [Linux]: https://man7.org/linux/man-pages/man3/getauxval.3.html
-#[cfg(any(
-    linux_raw,
-    any(
-        all(target_os = "android", target_pointer_width = "64"),
-        target_os = "linux",
-    )
-))]
-#[inline]
-pub fn linux_minsigstksz() -> usize {
-    backend::param::auxv::linux_minsigstksz()
-}
-
-/// `getauxval(AT_EXECFN)`—Returns the Linux "execfn" string.
-///
-/// Return the string that Linux has recorded as the filesystem path to the
-/// executable. Returns an empty string if the string is not available.
-///
-/// # References
-///  - [Linux]
-///
-/// [Linux]: https://man7.org/linux/man-pages/man3/getauxval.3.html
-#[cfg(any(
-    linux_raw,
-    any(
-        all(target_os = "android", target_pointer_width = "64"),
-        target_os = "linux",
-    )
-))]
-#[inline]
-pub fn linux_execfn() -> &'static CStr {
-    backend::param::auxv::linux_execfn()
-}