feat: migrate from Cedar to SpiceDB authorization system

This is a major architectural change that replaces the Cedar policy-based
authorization system with SpiceDB's relation-based authorization.

Key changes:

- Migrate from Rust to Go implementation
- Replace Cedar policies with SpiceDB schema and relationships
- Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks
- Update build system and dependencies for Go ecosystem
- Maintain Envoy integration for external authorization

This change enables more flexible permission modeling through SpiceDB's
Google Zanzibar inspired relation-based system, supporting complex
hierarchical permissions that were difficult to express in Cedar.

Breaking change: Existing Cedar policies and Rust-based configuration
will no longer work and need to be migrated to SpiceDB schema.

1 files changed, 0 insertions, 25 deletions

diff --git a/vendor/tinyvec_macros/src/lib.rs b/vendor/tinyvec_macros/src/lib.rs
deleted file mode 100644
index 3c15b19d..00000000
--- a/vendor/tinyvec_macros/src/lib.rs
+++ /dev/null
@@ -1,25 +0,0 @@
-#![no_std]
-#![forbid(unsafe_code)]
-
-#[macro_export]
-macro_rules! impl_mirrored {
-    {
-    type Mirror = $tinyname:ident;
-    $(
-        $(#[$attr:meta])*
-        $v:vis fn $fname:ident ($seif:ident : $seifty:ty $(,$argname:ident : $argtype:ty)*) $(-> $ret:ty)? ;
-    )*
-    } => {
-        $(
-        $(#[$attr])*
-        #[inline(always)]
-        $v fn $fname($seif : $seifty, $($argname: $argtype),*) $(-> $ret)? {
-            match $seif {
-                $tinyname::Inline(i) => i.$fname($($argname),*),
-                $tinyname::Heap(h) => h.$fname($($argname),*),
-            }
-        }
-        )*
-    };
-}
-