Create Go type definitions for the PKI API in openshift/api repository with comprehensive OpenAPI validation rules.Types to define:* PKI (main resource type)* PKIList (collection type - Kubernetes convention)* PKISpec (user-settable configuration)* PKIStatus (observed values)* KeyConfig (algorithm, keySize, curve)* CategoryKeyConfig (category + KeyConfig)* CertificateKeyConfigOverride (certificateName + KeyConfig)* KeyAlgorithm enum (RSA, ECDSA)* ECDSACurve enum (P256, P384, P521)* CertificateCategory enum (SignerCertificate, ServingCertificate, ClientCertificate)Required Go annotations for PKI:* +genclient, +genclient:nonNamespaced* +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object* +kubebuilder:object:root=true, +kubebuilder:subresource:status* +kubebuilder:resource:path=pkis,scope=Cluster* +openshift:compatibility-gen:level=4 (TechPreviewNoUpgrade)Validation rules:* Mutual exclusivity (keySize for RSA, curve for ECDSA)* Enum constraints for all enums* Required fields validation* List validation (listType=map, listMapKey)Location: openshift/api/config/v1alpha1/types_pki.go*Acceptance:** All types defined with complete godoc* All Go annotations present on PKI and PKIList* All validation markers added* Generated CRD includes validation rules* Invalid configs rejected by API server* Code compiles, follows api/config conventions