see https://tekton.dev/docs/chains/authentication/#specifying-spiffe-as-authentication-provider, where in order to work with spiffe, spire, some volume mounts and env vars need to be added to the chains controller which is not possible today as the operator is going to reconcile it back if the YAML is edited manually

this needs to be done via tektonconfig.spec.chains...