refactor(acl): migrate to shared ACL client and add GetObject handler (#322)

**Because**

- The ACL client implementation was duplicated across multiple backend
services
- OpenFGA cache configuration needs to be explicit for consistent
behavior
- The `GetObject` API endpoint was missing from the handler
- Resource ID generation utilities were duplicated and should use the
shared library
- Pipeline release operations needed to handle OUTPUT_ONLY slug field
correctly

**This commit**

- Refactors `pkg/acl/acl.go` to use the shared ACL client from
`github.com/instill-ai/x/acl`, reducing ~350 lines of duplicate OpenFGA
client logic
- Adds OpenFGA cache configuration in `config/config.yaml` with
`enabled: false` and `ttl: 60`
- Adds cache configuration struct to `config/config.go` to support the
new OpenFGA cache settings
- Implements `GetObject` handler in `pkg/handler/object.go` for
retrieving object details by AIP-compliant name
- Adds `GetObjectByID` method to `pkg/service/object.go` for
service-layer object lookup
- Refactors `pkg/utils/utils.go` to use shared
`resource.GenerateResourceID` from x package instead of duplicated
base62 encoding logic
- Updates `pkg/pipeline/release.go` to handle OUTPUT_ONLY `Slug` field:
- Removes setting `Slug` on Pipeline creation (server-generated from
DisplayName)
  - Lists releases to find existing by slug instead of direct ID lookup
  - Adds `DisplayName` field to PipelineRelease
- Updates various handlers and workers to align with refactored ACL
client interface
- Updates dependencies:
  - `protogen-go`: updated to latest alpha with flattened packages
  - `x`: updated to latest with shared ACL client and resource utilities

Author: pinglin

.github/workflows/golangci-lint.yml

@@ -22,7 +22,7 @@ jobs:
           go-version: ${{ env.GOLANG_VERSION }}
           cache: false
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@v8
+        uses: golangci/golangci-lint-action@v9
         with:
           version: v2.8.0
           args: --timeout=10m

config/config.go

@@ -54,6 +54,10 @@ type OpenFGAConfig struct {
 		Port                 int    `koanf:"port"`
 		ReplicationTimeFrame int    `koanf:"replicationtimeframe"` // in seconds
 	} `koanf:"replica"`
+	Cache struct {
+		Enabled bool `koanf:"enabled"` // Enable permission caching
+		TTL     int  `koanf:"ttl"`     // Cache TTL in seconds (default: 60)
+	} `koanf:"cache"`
 }
 
 // ServerConfig defines HTTP server configurations

config/config.yaml

@@ -80,6 +80,9 @@ registry:
 openfga:
   host: openfga
   port: 8081
+  cache:
+    enabled: false
+    ttl: 60  # Permission cache TTL in seconds
 minio:
   host: minio
   port: 9000

go.mod

@@ -13,8 +13,8 @@ require (
 	github.com/grpc-ecosystem/go-grpc-middleware v1.4.0
 	github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.1
 	github.com/iancoleman/strcase v0.3.0
-	github.com/instill-ai/protogen-go v0.3.3-alpha.0.20260118041154-8f06ba4d527d
-	github.com/instill-ai/x v0.10.1-alpha.0.20260118004501-5221537d0a1d
+	github.com/instill-ai/protogen-go v0.3.3-alpha.0.20260122065215-c32ea2feec1f
+	github.com/instill-ai/x v0.10.1-alpha.0.20260122090555-bea4f728b22c
 	github.com/knadh/koanf v1.5.0
 	github.com/mennanov/fieldmask-utils v1.1.2
 	github.com/milvus-io/milvus/client/v2 v2.6.1

go.sum

@@ -419,10 +419,10 @@ github.com/iancoleman/strcase v0.3.0 h1:nTXanmYxhfFAMjZL34Ov6gkzEsSJZ5DbhxWjvSAS
 github.com/iancoleman/strcase v0.3.0/go.mod h1:iwCmte+B7n89clKwxIoIXy/HfoL7AsD47ZCWhYzw7ho=
 github.com/imkira/go-interpol v1.1.0/go.mod h1:z0h2/2T3XF8kyEPpRgJ3kmNv+C43p+I/CoI+jC3w2iA=
 github.com/inconshreveable/mousetrap v1.0.0/go.mod h1:PxqpIevigyE2G7u3NXJIT2ANytuPF1OarO4DADm73n8=
-github.com/instill-ai/protogen-go v0.3.3-alpha.0.20260118041154-8f06ba4d527d h1:nQTNxSL0sakFtObb6tnZqXcB/LF1dqGFoaRfX5ywDfA=
-github.com/instill-ai/protogen-go v0.3.3-alpha.0.20260118041154-8f06ba4d527d/go.mod h1:bCnBosofpaUxKBuTTJM3/I3thAK37kvfBnKByjnLsl4=
-github.com/instill-ai/x v0.10.1-alpha.0.20260118004501-5221537d0a1d h1:YUOzft7m56Jj+FUohdmn36d8gFnDcDo/tO2ij1zrzhw=
-github.com/instill-ai/x v0.10.1-alpha.0.20260118004501-5221537d0a1d/go.mod h1:NZwVnFLteR6JvV35pCYOOO75YMzTABefbrBC6YWDF/E=
+github.com/instill-ai/protogen-go v0.3.3-alpha.0.20260122065215-c32ea2feec1f h1:Ypnhf9ywdC2z8YLtSZytFZJjlDYH7sNDpfNv1Ul8Zpw=
+github.com/instill-ai/protogen-go v0.3.3-alpha.0.20260122065215-c32ea2feec1f/go.mod h1:bCnBosofpaUxKBuTTJM3/I3thAK37kvfBnKByjnLsl4=
+github.com/instill-ai/x v0.10.1-alpha.0.20260122090555-bea4f728b22c h1:9Z3NbM6Elzh1zlOGc7PKNP52vQPuM3pwxuj2Zsoh+aE=
+github.com/instill-ai/x v0.10.1-alpha.0.20260122090555-bea4f728b22c/go.mod h1:/xG0LMh43kyyK9jXGtV/JGd5p9GVcreSZ6GRGVbALEU=
 github.com/iris-contrib/blackfriday v2.0.0+incompatible/go.mod h1:UzZ2bDEoaSGPbkg6SAB4att1aAwTmVIx/5gCVqeyUdI=
 github.com/iris-contrib/go.uuid v2.0.0+incompatible/go.mod h1:iz2lgM/1UnEf1kP0L/+fafWORmlnuysV2EMP8MW+qe0=
 github.com/iris-contrib/jade v1.1.3/go.mod h1:H/geBymxJhShH5kecoiOCSssPX7QWYH7UaeZTSWddIk=