feat: migrate from Cedar to SpiceDB authorization system

This is a major architectural change that replaces the Cedar policy-based
authorization system with SpiceDB's relation-based authorization.

Key changes:

- Migrate from Rust to Go implementation
- Replace Cedar policies with SpiceDB schema and relationships
- Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks
- Update build system and dependencies for Go ecosystem
- Maintain Envoy integration for external authorization

This change enables more flexible permission modeling through SpiceDB's
Google Zanzibar inspired relation-based system, supporting complex
hierarchical permissions that were difficult to express in Cedar.

Breaking change: Existing Cedar policies and Rust-based configuration
will no longer work and need to be migrated to SpiceDB schema.

1 files changed, 0 insertions, 104 deletions

diff --git a/vendor/time/src/tests.rs b/vendor/time/src/tests.rs
deleted file mode 100644
index 1a404aa9..00000000
--- a/vendor/time/src/tests.rs
+++ /dev/null
@@ -1,104 +0,0 @@
-#![cfg(all( // require `--all-features` to be passed
-    feature = "default",
-    feature = "alloc",
-    feature = "formatting",
-    feature = "large-dates",
-    feature = "local-offset",
-    feature = "macros",
-    feature = "parsing",
-    feature = "quickcheck",
-    feature = "serde-human-readable",
-    feature = "serde-well-known",
-    feature = "std",
-    feature = "rand",
-    feature = "serde",
-))]
-#![allow(
-    let_underscore_drop,
-    clippy::clone_on_copy,
-    clippy::cognitive_complexity,
-    clippy::std_instead_of_core
-)]
-
-//! Tests for internal details.
-//!
-//! This module should only be used when it is not possible to test the implementation in a
-//! reasonable manner externally.
-
-use std::format;
-use std::num::NonZeroU8;
-
-use crate::ext::DigitCount;
-use crate::parsing::combinator::rfc::iso8601;
-use crate::parsing::shim::Integer;
-use crate::{duration, parsing};
-
-#[test]
-fn digit_count() {
-    assert_eq!(1_u8.num_digits(), 1);
-    assert_eq!(9_u8.num_digits(), 1);
-    assert_eq!(10_u8.num_digits(), 2);
-    assert_eq!(99_u8.num_digits(), 2);
-    assert_eq!(100_u8.num_digits(), 3);
-
-    assert_eq!(1_u16.num_digits(), 1);
-    assert_eq!(9_u16.num_digits(), 1);
-    assert_eq!(10_u16.num_digits(), 2);
-    assert_eq!(99_u16.num_digits(), 2);
-    assert_eq!(100_u16.num_digits(), 3);
-    assert_eq!(999_u16.num_digits(), 3);
-    assert_eq!(1_000_u16.num_digits(), 4);
-    assert_eq!(9_999_u16.num_digits(), 4);
-    assert_eq!(10_000_u16.num_digits(), 5);
-
-    assert_eq!(1_u32.num_digits(), 1);
-    assert_eq!(9_u32.num_digits(), 1);
-    assert_eq!(10_u32.num_digits(), 2);
-    assert_eq!(99_u32.num_digits(), 2);
-    assert_eq!(100_u32.num_digits(), 3);
-    assert_eq!(999_u32.num_digits(), 3);
-    assert_eq!(1_000_u32.num_digits(), 4);
-    assert_eq!(9_999_u32.num_digits(), 4);
-    assert_eq!(10_000_u32.num_digits(), 5);
-    assert_eq!(99_999_u32.num_digits(), 5);
-    assert_eq!(100_000_u32.num_digits(), 6);
-    assert_eq!(999_999_u32.num_digits(), 6);
-    assert_eq!(1_000_000_u32.num_digits(), 7);
-    assert_eq!(9_999_999_u32.num_digits(), 7);
-    assert_eq!(10_000_000_u32.num_digits(), 8);
-    assert_eq!(99_999_999_u32.num_digits(), 8);
-    assert_eq!(100_000_000_u32.num_digits(), 9);
-    assert_eq!(999_999_999_u32.num_digits(), 9);
-    assert_eq!(1_000_000_000_u32.num_digits(), 10);
-}
-
-#[test]
-fn debug() {
-    let _ = format!("{:?}", duration::Padding::Optimize);
-    let _ = format!("{:?}", parsing::ParsedItem(b"", 0));
-    let _ = format!("{:?}", parsing::component::Period::Am);
-    let _ = format!("{:?}", iso8601::ExtendedKind::Basic);
-}
-
-#[test]
-fn clone() {
-    assert_eq!(
-        parsing::component::Period::Am.clone(),
-        parsing::component::Period::Am
-    );
-    // does not impl Debug
-    assert!(crate::time::Padding::Optimize.clone() == crate::time::Padding::Optimize);
-    // does not impl PartialEq
-    assert!(matches!(
-        iso8601::ExtendedKind::Basic.clone(),
-        iso8601::ExtendedKind::Basic
-    ));
-}
-
-#[test]
-fn parsing_internals() {
-    assert!(parsing::ParsedItem(b"", ())
-        .flat_map(|_| None::<()>)
-        .is_none());
-    assert!(<NonZeroU8 as Integer>::parse_bytes(b"256").is_none());
-}