feat: migrate from Cedar to SpiceDB authorization system

This is a major architectural change that replaces the Cedar policy-based
authorization system with SpiceDB's relation-based authorization.

Key changes:

- Migrate from Rust to Go implementation
- Replace Cedar policies with SpiceDB schema and relationships
- Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks
- Update build system and dependencies for Go ecosystem
- Maintain Envoy integration for external authorization

This change enables more flexible permission modeling through SpiceDB's
Google Zanzibar inspired relation-based system, supporting complex
hierarchical permissions that were difficult to express in Cedar.

Breaking change: Existing Cedar policies and Rust-based configuration
will no longer work and need to be migrated to SpiceDB schema.

1 files changed, 0 insertions, 96 deletions

diff --git a/vendor/thiserror/tests/test_lints.rs b/vendor/thiserror/tests/test_lints.rs
deleted file mode 100644
index 5e2b8957..00000000
--- a/vendor/thiserror/tests/test_lints.rs
+++ /dev/null
@@ -1,96 +0,0 @@
-#![allow(clippy::mixed_attributes_style)]
-
-use thiserror::Error;
-
-pub use std::error::Error;
-
-#[test]
-fn test_allow_attributes() {
-    #![deny(clippy::allow_attributes)]
-
-    #[derive(Error, Debug)]
-    #[error("...")]
-    pub struct MyError(#[from] anyhow::Error);
-
-    let _: MyError;
-}
-
-#[test]
-fn test_unused_qualifications() {
-    #![deny(unused_qualifications)]
-
-    // Expansion of derive(Error) macro can't know whether something like
-    // std::error::Error is already imported in the caller's scope so it must
-    // suppress unused_qualifications.
-
-    #[derive(Error, Debug)]
-    #[error("...")]
-    pub struct MyError;
-
-    let _: MyError;
-}
-
-#[test]
-fn test_needless_lifetimes() {
-    #![allow(dead_code)]
-    #![deny(clippy::elidable_lifetime_names, clippy::needless_lifetimes)]
-
-    #[derive(Error, Debug)]
-    #[error("...")]
-    pub enum MyError<'a> {
-        A(#[from] std::io::Error),
-        B(&'a ()),
-    }
-
-    let _: MyError;
-}
-
-#[test]
-fn test_deprecated() {
-    #![deny(deprecated)]
-
-    #[derive(Error, Debug)]
-    #[deprecated]
-    #[error("...")]
-    pub struct DeprecatedStruct;
-
-    #[derive(Error, Debug)]
-    #[error("{message} {}", .message)]
-    pub struct DeprecatedStructField {
-        #[deprecated]
-        message: String,
-    }
-
-    #[derive(Error, Debug)]
-    #[deprecated]
-    pub enum DeprecatedEnum {
-        #[error("...")]
-        Variant,
-    }
-
-    #[derive(Error, Debug)]
-    pub enum DeprecatedVariant {
-        #[deprecated]
-        #[error("...")]
-        Variant,
-    }
-
-    #[derive(Error, Debug)]
-    pub enum DeprecatedFrom {
-        #[error(transparent)]
-        Variant(
-            #[from]
-            #[allow(deprecated)]
-            DeprecatedStruct,
-        ),
-    }
-
-    #[allow(deprecated)]
-    let _: DeprecatedStruct;
-    #[allow(deprecated)]
-    let _: DeprecatedStructField;
-    #[allow(deprecated)]
-    let _ = DeprecatedEnum::Variant;
-    #[allow(deprecated)]
-    let _ = DeprecatedVariant::Variant;
-}