Affected by GO-2026-4465
and 3 other vulnerabilities
GO-2026-4465: LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic in github.com/authzed/spicedb
GO-2026-5133: SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected in github.com/authzed/spicedb
GO-2026-5465: SpiceDB's SPICEDB_DATASTORE_CONN_URI is leaked on startup logs in github.com/authzed/spicedb
GO-2026-5514: SpiceDB: Caveat structures with nested lists can result in improper cache reuse in github.com/authzed/spicedb
DatastoreConfigInitFunc returns a InitFunc that constructs a ds
with the top-level cmd/datastore machinery.
It can't be used everywhere due to import cycles, but makes it easy to write
an independent test with CLI-like config where possible.