Function mover_identity 

pub fn mover_identity(
    sc: &SecurityContext,
    psc: Option<&PodSecurityContext>,
) -> MoverIdentity

Build the mover’s read identity from its resolved container + pod security contexts.