allow customizing base world & syms for authorizer

[jvatic]

I've run into some cases where the default world max duration wasn't quite enough, resulting in intermittent failures. This PR exposes options to the caller to override the default limits (and for completeness, the default symbol table).

e.g.

b, err := biscuit.Unmarshal(token)
// ...

authorizer, err := b.Authorizer(
    publicRoot,
    biscuit.WithBaseWorld(
        datalog.NewWorld(
            datalog.WithMaxDuration(3 * time.Millisecond),
        ),
    ),
)
// ...

[jvatic]

(rebased to get checks passing)

[Geal]

making it more configurable is a good idea! We're moving away from making the default symbol table configurable though, this makes interoperability a lot harder.

[Geal]

would it be possible to make parameters like timeout configurable without setting the entire base world?

[jvatic]

would it be possible to make parameters like timeout configurable without setting the entire base world?

Yup! Are you thinking something like this?

func WithWorldOptions(opts ...datalog.WorldOption) AuthorizerOption {
// ...
}

[Geal]

alright, sounds good!