feat: migrate from Cedar to SpiceDB authorization system

This is a major architectural change that replaces the Cedar policy-based
authorization system with SpiceDB's relation-based authorization.

Key changes:

- Migrate from Rust to Go implementation
- Replace Cedar policies with SpiceDB schema and relationships
- Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks
- Update build system and dependencies for Go ecosystem
- Maintain Envoy integration for external authorization

This change enables more flexible permission modeling through SpiceDB's
Google Zanzibar inspired relation-based system, supporting complex
hierarchical permissions that were difficult to express in Cedar.

Breaking change: Existing Cedar policies and Rust-based configuration
will no longer work and need to be migrated to SpiceDB schema.

1 files changed, 0 insertions, 57 deletions

diff --git a/vendor/time/src/parsing/mod.rs b/vendor/time/src/parsing/mod.rs
deleted file mode 100644
index 34e92736..00000000
--- a/vendor/time/src/parsing/mod.rs
+++ /dev/null
@@ -1,57 +0,0 @@
-//! Parsing for various types.
-
-pub(crate) mod combinator;
-pub(crate) mod component;
-mod iso8601;
-pub(crate) mod parsable;
-mod parsed;
-pub(crate) mod shim;
-
-pub use self::parsable::Parsable;
-pub use self::parsed::Parsed;
-
-/// An item that has been parsed. Represented as a `(remaining, value)` pair.
-#[derive(Debug)]
-pub(crate) struct ParsedItem<'a, T>(pub(crate) &'a [u8], pub(crate) T);
-
-impl<'a, T> ParsedItem<'a, T> {
-    /// Map the value to a new value, preserving the remaining input.
-    pub(crate) fn map<U>(self, f: impl FnOnce(T) -> U) -> ParsedItem<'a, U> {
-        ParsedItem(self.0, f(self.1))
-    }
-
-    /// Map the value to a new, optional value, preserving the remaining input.
-    pub(crate) fn flat_map<U>(self, f: impl FnOnce(T) -> Option<U>) -> Option<ParsedItem<'a, U>> {
-        Some(ParsedItem(self.0, f(self.1)?))
-    }
-
-    /// Consume the stored value with the provided function. The remaining input is returned.
-    #[must_use = "this returns the remaining input"]
-    pub(crate) fn consume_value(self, f: impl FnOnce(T) -> Option<()>) -> Option<&'a [u8]> {
-        f(self.1)?;
-        Some(self.0)
-    }
-
-    /// Filter the value with the provided function. If the function returns `false`, the value
-    /// is discarded and `None` is returned. Otherwise, the value is preserved and `Some(self)` is
-    /// returned.
-    pub(crate) fn filter(self, f: impl FnOnce(&T) -> bool) -> Option<Self> {
-        f(&self.1).then_some(self)
-    }
-}
-
-impl<'a> ParsedItem<'a, ()> {
-    /// Discard the unit value, returning the remaining input.
-    #[must_use = "this returns the remaining input"]
-    pub(crate) const fn into_inner(self) -> &'a [u8] {
-        self.0
-    }
-}
-
-impl<'a> ParsedItem<'a, Option<()>> {
-    /// Discard the potential unit value, returning the remaining input.
-    #[must_use = "this returns the remaining input"]
-    pub(crate) const fn into_inner(self) -> &'a [u8] {
-        self.0
-    }
-}