To cover the authorization framework, we need:

• How-to guide for the OAuth settings on thv run and thv proxy and how they interact
• How to guide for OAuth in the K8s Operator
• Concepts guide on the authorization framework
• Concepts guide on writing Cedar policies

Engineering doc source material: https://github.com/stacklok/toolhive/blob/main/docs/authz.md