Configure cosign public key via CRD

[binbin-li]

Currently Ratify configures the cosign public key through the chart value while deployed which cannot update it dynamically. Although cosign also supports keyless verification, we probably need to support updating the cosign public key in the same way as notation cert if we keep supporting cosign keyed verification.