feat: migrate from Cedar to SpiceDB authorization system

This is a major architectural change that replaces the Cedar policy-based
authorization system with SpiceDB's relation-based authorization.

Key changes:

- Migrate from Rust to Go implementation
- Replace Cedar policies with SpiceDB schema and relationships
- Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks
- Update build system and dependencies for Go ecosystem
- Maintain Envoy integration for external authorization

This change enables more flexible permission modeling through SpiceDB's
Google Zanzibar inspired relation-based system, supporting complex
hierarchical permissions that were difficult to express in Cedar.

Breaking change: Existing Cedar policies and Rust-based configuration
will no longer work and need to be migrated to SpiceDB schema.

1 files changed, 0 insertions, 64 deletions

diff --git a/vendor/zeroize/Cargo.toml b/vendor/zeroize/Cargo.toml
deleted file mode 100644
index 707c2f93..00000000
--- a/vendor/zeroize/Cargo.toml
+++ /dev/null
@@ -1,64 +0,0 @@
-# THIS FILE IS AUTOMATICALLY GENERATED BY CARGO
-#
-# When uploading crates to the registry Cargo will automatically
-# "normalize" Cargo.toml files for maximal compatibility
-# with all versions of Cargo and also rewrite `path` dependencies
-# to registry (e.g., crates.io) dependencies.
-#
-# If you are reading this file be aware that the original Cargo.toml
-# will likely look very different (and much more reasonable).
-# See Cargo.toml.orig for the original contents.
-
-[package]
-edition = "2021"
-rust-version = "1.60"
-name = "zeroize"
-version = "1.8.1"
-authors = ["The RustCrypto Project Developers"]
-description = """
-Securely clear secrets from memory with a simple trait built on
-stable Rust primitives which guarantee memory is zeroed using an
-operation will not be 'optimized away' by the compiler.
-Uses a portable pure Rust implementation that works everywhere,
-even WASM!
-"""
-readme = "README.md"
-keywords = [
-    "memory",
-    "memset",
-    "secure",
-    "volatile",
-    "zero",
-]
-categories = [
-    "cryptography",
-    "memory-management",
-    "no-std",
-    "os",
-]
-license = "Apache-2.0 OR MIT"
-repository = "https://github.com/RustCrypto/utils/tree/master/zeroize"
-
-[package.metadata.docs.rs]
-all-features = true
-rustdoc-args = [
-    "--cfg",
-    "docsrs",
-]
-
-[dependencies.serde]
-version = "1.0"
-optional = true
-default-features = false
-
-[dependencies.zeroize_derive]
-version = "1.3"
-optional = true
-
-[features]
-aarch64 = []
-alloc = []
-default = ["alloc"]
-derive = ["zeroize_derive"]
-simd = []
-std = ["alloc"]