Mark the ctor-keystore feature as non-experimental

We decided at an Arti sync from a while ago that it would be okay to make this non-experimental and enabled by default.