Rekor v2 can only be used in production by hardcoding the service URL into the current production TUF signing config. When Rekor v2 is added to the production TUF signing config, we should get Rekor v2 in production from that signing config.