feat: migrate from Cedar to SpiceDB authorization system

This is a major architectural change that replaces the Cedar policy-based
authorization system with SpiceDB's relation-based authorization.

Key changes:

- Migrate from Rust to Go implementation
- Replace Cedar policies with SpiceDB schema and relationships
- Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks
- Update build system and dependencies for Go ecosystem
- Maintain Envoy integration for external authorization

This change enables more flexible permission modeling through SpiceDB's
Google Zanzibar inspired relation-based system, supporting complex
hierarchical permissions that were difficult to express in Cedar.

Breaking change: Existing Cedar policies and Rust-based configuration
will no longer work and need to be migrated to SpiceDB schema.

1 files changed, 0 insertions, 54 deletions

diff --git a/vendor/thiserror/tests/test_path.rs b/vendor/thiserror/tests/test_path.rs
deleted file mode 100644
index fa85c1d2..00000000
--- a/vendor/thiserror/tests/test_path.rs
+++ /dev/null
@@ -1,54 +0,0 @@
-#![cfg(feature = "std")]
-
-use core::fmt::Display;
-use ref_cast::RefCast;
-use std::path::{Path, PathBuf};
-use thiserror::Error;
-
-#[derive(Error, Debug)]
-#[error("failed to read '{file}'")]
-struct StructPathBuf {
-    file: PathBuf,
-}
-
-#[derive(Error, Debug, RefCast)]
-#[repr(C)]
-#[error("failed to read '{file}'")]
-struct StructPath {
-    file: Path,
-}
-
-#[derive(Error, Debug)]
-enum EnumPathBuf {
-    #[error("failed to read '{0}'")]
-    Read(PathBuf),
-}
-
-#[derive(Error, Debug)]
-#[error("{tail}")]
-pub struct UnsizedError {
-    pub head: i32,
-    pub tail: str,
-}
-
-#[derive(Error, Debug)]
-pub enum BothError {
-    #[error("display:{0} debug:{0:?}")]
-    DisplayDebug(PathBuf),
-    #[error("debug:{0:?} display:{0}")]
-    DebugDisplay(PathBuf),
-}
-
-fn assert<T: Display>(expected: &str, value: T) {
-    assert_eq!(expected, value.to_string());
-}
-
-#[test]
-fn test_display() {
-    let path = Path::new("/thiserror");
-    let file = path.to_owned();
-    assert("failed to read '/thiserror'", StructPathBuf { file });
-    let file = path.to_owned();
-    assert("failed to read '/thiserror'", EnumPathBuf::Read(file));
-    assert("failed to read '/thiserror'", StructPath::ref_cast(path));
-}