Currently refresh fails when trying to delete a resource. This is because when the resource object is constructed from remote state, it does not have the key of the resource.
To resolve, the resources remote state needs to be read into the resource objects output.
Relevant bit: https://github.com/notationhq/notation/blob/main/packages/core/src/provisioner/workflows/workflow.refresh.ts#L25-L32