fix(auth): authorize query and REST requests under --enforce-auth - #1383

apigateway.writeProxyResponse calls io.WriteString, which calls mem.writer.Write

grpc.Server.Serve calls grpc.Server.Serve, which eventually calls mem.ReadAll

grpc.Server.Serve calls grpc.Server.Serve, which eventually calls mem.NewBuffer

grpc.Server.Serve calls grpc.Server.Serve, which eventually calls mem.IsBelowBufferPoolingThreshold

grpc.Server.Serve calls grpc.Server.Serve, which eventually calls mem.BufferSlice.MaterializeToBuffer

grpc.Server.Serve calls grpc.Server.Serve, which eventually calls transport.http2Server.HandleStreams

compat.init calls storage.init, which eventually calls x.init

compat.init calls storage.init, which eventually calls sdk.init

compat.init calls storage.init, which calls resource.init

compat.init calls storage.init, which eventually calls instrumentation.init

Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-go@v5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

govulncheck reported findings (advisory)