FromContextOrDefaults returns a stored trustrootResyncPeriod if attached.

getSigstoreKeysFromTuf returns the sigstore keys from the TUF client.

NewController creates a Reconciler and returns the result of NewImpl.

This is what the default finalizer name is, but make it explicit so we can use it in tests as well.

Reconciler implements ConfigMap reconciler.