“Saudi Arabia still lacks a penal code, allowing judges significant discretion to decide what behavior constitutes a criminal offense, with grave consequences when it comes to citizen challenges to state authority.”