Tekton, Cosign, Kyverno: A Signed CI/CD Supply Chain on RKE2

Introduction The Workshop Where Trust Is Manufactured Here's a confession I'll make out loud: I was running code I'd never read, built by people I've never met, pulled from a registry I don't control—