at our company we treat the schema as code and it lives in a git repository and is written to spicedb as a part of the CI process. we don't otherwise expose the

WriteSchema

endpoint (we have a fronting service for SpiceDB)