feat: migrate from Cedar to SpiceDB authorization system

This is a major architectural change that replaces the Cedar policy-based
authorization system with SpiceDB's relation-based authorization.

Key changes:

- Migrate from Rust to Go implementation
- Replace Cedar policies with SpiceDB schema and relationships
- Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks
- Update build system and dependencies for Go ecosystem
- Maintain Envoy integration for external authorization

This change enables more flexible permission modeling through SpiceDB's
Google Zanzibar inspired relation-based system, supporting complex
hierarchical permissions that were difficult to express in Cedar.

Breaking change: Existing Cedar policies and Rust-based configuration
will no longer work and need to be migrated to SpiceDB schema.

1 files changed, 0 insertions, 38 deletions

diff --git a/vendor/rustix/src/termios/mod.rs b/vendor/rustix/src/termios/mod.rs
deleted file mode 100644
index 98efb9b3..00000000
--- a/vendor/rustix/src/termios/mod.rs
+++ /dev/null
@@ -1,38 +0,0 @@
-//! Terminal I/O stream operations.
-//!
-//! This API automatically supports setting arbitrary I/O speeds, on any
-//! platform that supports them, including Linux and the BSDs.
-//!
-//! The [`speed`] module contains various predefined speed constants which are
-//! more likely to be portable, however any `u32` value can be passed to
-//! [`Termios::set_speed`], [`Termios::set_input_speed`], and
-//! [`Termios::set_output_speed`], and they will simply fail if the speed is
-//! not supported by the platform or the device.
-
-#[cfg(not(any(
-    target_os = "cygwin",
-    target_os = "espidf",
-    target_os = "haiku",
-    target_os = "wasi",
-)))]
-mod ioctl;
-#[cfg(not(target_os = "wasi"))]
-mod tc;
-#[cfg(not(windows))]
-mod tty;
-#[cfg(not(any(target_os = "espidf", target_os = "wasi")))]
-mod types;
-
-#[cfg(not(any(
-    target_os = "cygwin",
-    target_os = "espidf",
-    target_os = "haiku",
-    target_os = "wasi",
-)))]
-pub use ioctl::*;
-#[cfg(not(target_os = "wasi"))]
-pub use tc::*;
-#[cfg(not(windows))]
-pub use tty::*;
-#[cfg(not(any(target_os = "espidf", target_os = "wasi")))]
-pub use types::*;