See conversation here: https://github.com/authzed/spicedb/pull/2685/files#r2542339099

The idea is that in places where it's appropriate, rather than doing safecast error handling, we write a MustBugF-ish function that panics in test and passes the default value everywhere else. This should be a relatively straightforward refactor.