controller-runtime does not support subresources so we use REST client directly.

Code adapted from Porch internal cmdrpkgpull and cmdrpkgpush.