Attestation key can take too long to approve

[Jakob-Naucke]

seen locally with KubeVirt, although never seen in (by this point very many) GHA CI runs

[2026-07-29T15:53:28Z INFO  operator::attestation_key_register] secret reconciled for ak volumes (ObjectRef { dyntype: (), name: "test-coreos-vm-ignition-secret", namespace: Some("test-005de2e7"), extra: Extra { resource_version: Some("6122"), uid: Some("f2cda79c-70fd-43be-a261-7f7e33face74") } }, Action { requeue_after: None })
[2026-07-29T15:54:34Z INFO  operator::attestation_key_register] Machine reconciliation for: machine-621b908e-632e-40a6-91f6-ee496b96621f
[2026-07-29T15:54:34Z INFO  operator::attestation_key_register] machine reconciled for ak approval (ObjectRef { dyntype: (), name: "machine-621b908e-632e-40a6-91f6-ee496b96621f", namespace: Some("test-005de2e7"), extra: Extra { resource_version: Some("6368"), uid: Some("fd7b6ff5-788c-41a0-9aff-d8a55684fdb4") } }, Action { requeue_after: None })
[2026-07-29T15:54:34Z INFO  operator::attestation_key_register] Machine reconciliation for: machine-621b908e-632e-40a6-91f6-ee496b96621f
[2026-07-29T15:54:34Z INFO  operator::attestation_key_register] machine reconciled for ak approval (ObjectRef { dyntype: (), name: "machine-621b908e-632e-40a6-91f6-ee496b96621f", namespace: Some("test-005de2e7"), extra: Extra { resource_version: Some("6369"), uid: Some("fd7b6ff5-788c-41a0-9aff-d8a55684fdb4") } }, Action { requeue_after: None })
[2026-07-29T15:54:34Z INFO  operator::attestation_key_register] secret reconciled for ak volumes (ObjectRef { dyntype: (), name: "621b908e-632e-40a6-91f6-ee496b96621f", namespace: Some("test-005de2e7"), extra: Extra { resource_version: Some("6370"), uid: Some("357352fb-bf9c-4524-9a4e-33c70742d681") } }, Action { requeue_after: None })
[2026-07-29T15:57:23Z INFO  operator::attestation_key_register] Attestation Key reconciliation for: ak-7cbfae42-b99a-4e79-bee0-a65fd66add3f
[2026-07-29T15:57:23Z INFO  operator::attestation_key_register] Approved attestation key ak-7cbfae42-b99a-4e79-bee0-a65fd66add3f

notice the time gap between recognition and approval of the attestation key (by that time, guest's clevis had run out of trials)

To my eyes, this seems like a case of the cache refreshing too late. Or we up the attempts and find this acceptable.

cc @yairpod @alicefr