feat(tpe): add type-aware partial authorization request and response

[muditchaudhary]

Summary

Adds the request and response types for Cedar's type-aware partial evaluation (TPE), plus the FFI validator behind them. This is the other half of the foundation — #370 added the entity model. Everything is @Experimental and purely additive; no existing API changes.

The authorization call itself still doesn't exist. That's the next PR, which adds the Rust handler and the AuthorizationEngine methods.

What

CedarJava

• TypeAwarePartialAuthorizationRequest — the principal and resource may have an unknown id, their types are always known, and the action must be concrete. Its builder type checks against the schema at build time, so a request in hand has been checked. Overloads accept a concrete EntityUID, a PartialEntityUID, or just an EntityTypeName for the unknown-id case.
• TypeAwarePartialAuthorizationResponse — the success/failure envelope, mirroring Partial Evaluation's shape.
• TypeAwarePartialAuthorizationSuccessResponse — the decision, every residual, the trivial and non-trivial partitions as JSON, and getPolicySet() for reauthorization.

CedarJavaFFI

• validate_type_aware_partial_request, which builds a PartialRequest and discards it — the same validate-and-discard pattern as the entity validators.

Notable decisions

Residual accessors are deliberately not named after Cedar's. . Instead getPolicySet() is every residual, and the trivial/non-trivial split is computed here from the nontrivialResiduals id set.

Issue: #364

[mark-creamer-amazon]

Nit: Better, but I think my vote would be CEDAR_SCHEMA_SRC going in this direction

[mark-creamer-amazon]

Nit: Nice, but I guess then if we ever update it, we'd have to update it in two places. Wonder if we should use a Cedar Rust Schema helper here to convert CEDAR_SRC directly instead.