feat!: Make runtime.effectiveDerivedRoles available in CEL expressi…

…ons (#1778)

* Unify type of `request` in expressions
* Support `P.derivedRoles` in checks
* Add `yaml-language-server` modelines to query planner test policies
* Support `P.derivedRoles` in plans
* Add documentation
* Fix broken link in v0.3.0 release notes
* Disable flaky unused `nolint` detection
  golangci/golangci-lint#3228
* Support `request.auxData` as well as `request.aux_data` in plans
* Rename to `runtime.effectiveDerivedRoles`, and compute lazily

Signed-off-by: Andrew Haines <haines@cerbos.dev>

.golangci.yaml

@@ -41,7 +41,7 @@ linters-settings:
       - shadow
 
   nolintlint:
-    allow-unused: false
+    allow-unused: true # false would be preferable, but it's flaky (https://github.com/golangci/golangci-lint/issues/3228)
     allow-leading-space: false
     require-specific: true