Declarative authorization service for cloud-native security