feat(calendar,addressbook): prepare authz engine

src/interfaces/api/handlers/grant_handler.rs

@@ -113,6 +113,14 @@ pub async fn create_grant(
             .get_by_id(id)
             .await
             .map(|d| d.drive.typed_policies()),
+        // Calendars and address books live outside the drive
+        // hierarchy (top-level per user), so no drive-level policy
+        // gates apply. If per-calendar / per-address-book policies
+        // ever ship, they'll live on the resource itself, not on a
+        // drive; the default-empty bag is the right no-op here.
+        Resource::Calendar(_) | Resource::AddressBook(_) => {
+            Ok(crate::domain::entities::drive::DrivePolicies::default())
+        }
     };
     let drive_policies = match drive_policies {
         Ok(p) => p,