feat: migrate from Cedar to SpiceDB authorization system

This is a major architectural change that replaces the Cedar policy-based
authorization system with SpiceDB's relation-based authorization.

Key changes:

- Migrate from Rust to Go implementation
- Replace Cedar policies with SpiceDB schema and relationships
- Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks
- Update build system and dependencies for Go ecosystem
- Maintain Envoy integration for external authorization

This change enables more flexible permission modeling through SpiceDB's
Google Zanzibar inspired relation-based system, supporting complex
hierarchical permissions that were difficult to express in Cedar.

Breaking change: Existing Cedar policies and Rust-based configuration
will no longer work and need to be migrated to SpiceDB schema.

1 files changed, 0 insertions, 54 deletions

diff --git a/vendor/windows-core/src/lib.rs b/vendor/windows-core/src/lib.rs
deleted file mode 100644
index 7fa7db45..00000000
--- a/vendor/windows-core/src/lib.rs
+++ /dev/null
@@ -1,54 +0,0 @@
-#![doc = include_str!("../readme.md")]
-#![doc(html_no_source)]
-#![allow(non_snake_case)]
-#![debugger_visualizer(natvis_file = "../windows-core.natvis")]
-#![cfg_attr(all(not(feature = "std")), no_std)]
-
-#[cfg(windows)]
-include!("windows.rs");
-
-extern crate self as windows_core;
-
-extern crate alloc;
-
-use alloc::boxed::Box;
-
-#[doc(hidden)]
-pub mod imp;
-
-mod as_impl;
-mod com_object;
-mod guid;
-mod inspectable;
-mod interface;
-mod out_param;
-mod out_ref;
-mod param;
-mod param_value;
-mod r#ref;
-mod runtime_name;
-mod runtime_type;
-mod scoped_interface;
-mod r#type;
-mod unknown;
-mod weak;
-
-pub use as_impl::*;
-pub use com_object::*;
-pub use guid::*;
-pub use inspectable::*;
-pub use interface::*;
-pub use out_param::*;
-pub use out_ref::*;
-pub use param::*;
-pub use param_value::*;
-pub use r#ref::*;
-pub use r#type::*;
-pub use runtime_name::*;
-pub use runtime_type::*;
-pub use scoped_interface::*;
-pub use unknown::*;
-pub use weak::*;
-pub use windows_implement::implement;
-pub use windows_interface::interface;
-pub use windows_result::*;