feat(policy): actions service RPCs should actually hit storage layer CRUD

[jakedoublev]

Proposed Changes

• roundtrip to db storage in actions service RPCs

Checklist

• I have added or updated unit tests
• I have added or updated integration tests (if appropriate)
• I have added or updated documentation

Testing Instructions

[github-actions]

Standard Benchmark Skipped or Failed

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	365.844873ms
Throughput	273.34 requests/second

[github-actions]

Standard Benchmark Skipped or Failed

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	376.734684ms
Throughput	265.44 requests/second

[github-actions]

Standard Benchmark Skipped or Failed

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	357.141658ms
Throughput	280.00 requests/second

Invalidated by push of db5a5d1

[github-actions]

Standard Benchmark Skipped or Failed

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	368.789265ms
Throughput	271.16 requests/second

[github-actions]

Standard Benchmark Skipped or Failed

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	373.339679ms
Throughput	267.85 requests/second

[github-actions]

Standard Benchmark Skipped or Failed

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	367.888266ms
Throughput	271.82 requests/second

[github-actions]

Standard Benchmark Skipped or Failed

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	386.798928ms
Throughput	258.53 requests/second

[github-actions]

Standard Benchmark Skipped or Failed

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	372.978113ms
Throughput	268.11 requests/second

[Copilot]

Pull Request Overview

This PR implements the actions service RPCs to perform actual database CRUD operations and integrates the new actions service into the policy service registration and SDK. Key changes include:

• Adding actions service registration and corresponding import in policy.
• Implementing full CRUD methods (Get, List, Create, Update, Delete) for actions in the actions service.
• Updating test expectations and audit logging constants to accommodate the new service.

Reviewed Changes

Copilot reviewed 8 out of 9 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
service/policy/policy.go	Added actions service import and registration.
service/policy/namespaces/namespaces.go	Removed an extraneous blank line.
service/policy/db/subject_mappings.go	Removed custom error handling for divide-by-zero errors.
service/policy/db/actions.go	Simplified standard action check in DeleteAction.
service/policy/actions/actions.go	Added complete implementations for action service CRUD operations.
service/pkg/server/services_test.go	Updated tests to reflect the new expected policy services count.
service/logger/audit/constants.go	Added audit object type for actions.
sdk/sdk.go	Updated SDK struct to include actions service and reordered clients.

Files not reviewed (1)

• service/policy/db/query.sql: Language not supported

Comments suppressed due to low confidence (2)

service/policy/db/subject_mappings.go:508

• The removal of the custom division-by-zero error handling might introduce unintended behavior if the database still returns such errors. Please confirm that the change is compliant with the current database behavior.

if err != nil {

sdk/sdk.go:69

• [nitpick] The field name 'EntityResoution' appears to be misspelled. Consider renaming it to 'EntityResolution' for clarity and consistency.

EntityResoution         entityresolution.NewEntityResolutionServiceClient(ersConn),