feat: migrate from Cedar to SpiceDB authorization system

This is a major architectural change that replaces the Cedar policy-based
authorization system with SpiceDB's relation-based authorization.

Key changes:

- Migrate from Rust to Go implementation
- Replace Cedar policies with SpiceDB schema and relationships
- Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks
- Update build system and dependencies for Go ecosystem
- Maintain Envoy integration for external authorization

This change enables more flexible permission modeling through SpiceDB's
Google Zanzibar inspired relation-based system, supporting complex
hierarchical permissions that were difficult to express in Cedar.

Breaking change: Existing Cedar policies and Rust-based configuration
will no longer work and need to be migrated to SpiceDB schema.

1 files changed, 0 insertions, 35 deletions

diff --git a/vendor/time/src/error/indeterminate_offset.rs b/vendor/time/src/error/indeterminate_offset.rs
deleted file mode 100644
index d25d4164..00000000
--- a/vendor/time/src/error/indeterminate_offset.rs
+++ /dev/null
@@ -1,35 +0,0 @@
-//! Indeterminate offset
-
-use core::fmt;
-
-use crate::error;
-
-/// The system's UTC offset could not be determined at the given datetime.
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub struct IndeterminateOffset;
-
-impl fmt::Display for IndeterminateOffset {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        f.write_str("The system's UTC offset could not be determined")
-    }
-}
-
-#[cfg(feature = "std")]
-impl std::error::Error for IndeterminateOffset {}
-
-impl From<IndeterminateOffset> for crate::Error {
-    fn from(err: IndeterminateOffset) -> Self {
-        Self::IndeterminateOffset(err)
-    }
-}
-
-impl TryFrom<crate::Error> for IndeterminateOffset {
-    type Error = error::DifferentVariant;
-
-    fn try_from(err: crate::Error) -> Result<Self, Self::Error> {
-        match err {
-            crate::Error::IndeterminateOffset(err) => Ok(err),
-            _ => Err(error::DifferentVariant),
-        }
-    }
-}