fix(kas): Only hit authorization if data attributes not empty

[elizabethhealy]

Proposed Changes

• only make authorization call when necessary

go sdk creates a policy object with null in the attributes field if none provided but js fills it with "[]" which still triggered an authorization call -- this change should stop that

Checklist

• [ ] I have added or updated unit tests
• [ ] I have added or updated integration tests (if appropriate)
• [ ] I have added or updated documentation

Testing Instructions