Expand description
Controller loop — watches for ConfiumSigningCeremony CRs and reconciles them.
The controller is a simplified reconciliation loop. In production
this would use kube-rs to watch the Kubernetes API; the scaffold
demonstrates the logic without the Kubernetes client dependency.