at a previous company we had a platform team that was responsible for a wrapping service for SpiceDB, and the repo for that wrapping service held the single schema for our setup. modifying the schema involved writing a PR against that repo.