feat: migrate from Cedar to SpiceDB authorization system

This is a major architectural change that replaces the Cedar policy-based
authorization system with SpiceDB's relation-based authorization.

Key changes:

- Migrate from Rust to Go implementation
- Replace Cedar policies with SpiceDB schema and relationships
- Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks
- Update build system and dependencies for Go ecosystem
- Maintain Envoy integration for external authorization

This change enables more flexible permission modeling through SpiceDB's
Google Zanzibar inspired relation-based system, supporting complex
hierarchical permissions that were difficult to express in Cedar.

Breaking change: Existing Cedar policies and Rust-based configuration
will no longer work and need to be migrated to SpiceDB schema.

1 files changed, 0 insertions, 64 deletions

diff --git a/vendor/windows-strings/src/pstr.rs b/vendor/windows-strings/src/pstr.rs
deleted file mode 100644
index 141d481b..00000000
--- a/vendor/windows-strings/src/pstr.rs
+++ /dev/null
@@ -1,64 +0,0 @@
-use super::*;
-
-/// A pointer to a null-terminated string of 8-bit Windows (ANSI) characters.
-#[repr(transparent)]
-#[derive(Clone, Copy, PartialEq, Eq, Debug)]
-pub struct PSTR(pub *mut u8);
-
-impl PSTR {
-    /// Construct a new `PSTR` from a raw pointer
-    pub const fn from_raw(ptr: *mut u8) -> Self {
-        Self(ptr)
-    }
-
-    /// Construct a null `PSTR`
-    pub const fn null() -> Self {
-        Self(core::ptr::null_mut())
-    }
-
-    /// Returns a raw pointer to the `PSTR`
-    pub const fn as_ptr(&self) -> *mut u8 {
-        self.0
-    }
-
-    /// Checks whether the `PSTR` is null
-    pub fn is_null(&self) -> bool {
-        self.0.is_null()
-    }
-
-    /// String data without the trailing 0
-    ///
-    /// # Safety
-    ///
-    /// The `PSTR`'s pointer needs to be valid for reads up until and including the next `\0`.
-    pub unsafe fn as_bytes(&self) -> &[u8] {
-        unsafe {
-            let len = strlen(PCSTR::from_raw(self.0));
-            core::slice::from_raw_parts(self.0, len)
-        }
-    }
-
-    /// Copy the `PSTR` into a Rust `String`.
-    ///
-    /// # Safety
-    ///
-    /// See the safety information for `PSTR::as_bytes`.
-    pub unsafe fn to_string(&self) -> core::result::Result<String, alloc::string::FromUtf8Error> {
-        unsafe { String::from_utf8(self.as_bytes().into()) }
-    }
-
-    /// Allow this string to be displayed.
-    ///
-    /// # Safety
-    ///
-    /// See the safety information for `PSTR::as_bytes`.
-    pub unsafe fn display(&self) -> impl core::fmt::Display + '_ {
-        unsafe { Decode(move || decode_utf8(self.as_bytes())) }
-    }
-}
-
-impl Default for PSTR {
-    fn default() -> Self {
-        Self::null()
-    }
-}