feat: Add OpaClient to wrap auth checks

[tpoliaw]

Proof of concept opa client with dependency injection and example check

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 95.77%. Comparing base (e6ca161) to head (a093b5a).

Additional details and impacted files

@@               Coverage Diff                @@
##           depends-user    #1541      +/-   ##
================================================
+ Coverage         95.63%   95.77%   +0.14%     
================================================
  Files                43       44       +1     
  Lines              3228     3264      +36     
================================================
+ Hits               3087     3126      +39     
+ Misses              141      138       -3     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[fajinyuan]

please see my questions.

[ZohebShaikh]

looks good

[ZohebShaikh]

nit: Will be good to TypeAdapter the result to bool because of python

Something like this

        from pydantic import TypeAdapter
        return TypeAdapter(bool).validate_python((await resp.json())["result"])

I think we should as put this in

try:
  	TypeAdapter(bool).validate_python((await resp.json())["result"])
except KeyError : # on result unlikely
	...
except Timeout to OPA as e:
	raise e as Timeouterror

or just Exception

[tpoliaw]

What does the TypeAdapter protect against? OPA returning "False" instead of False?

For the exception handling, does wrapping the exception here add much beyond letting the original exception be raised?