As an openshit developer, I want container runtime config controller to roll out BYOPKI config from ClusterImagePolicy CR to policy.json, so the customer can verifying the image signed with cosign BYOPKI