It’s code and agreement.

The code says 21 million is the limit.

Tens of millions of computers, operated by node runners, all spend energy (money) to agree that 21 million is the limit.

How can it be trusted? Because people are spending millions in aggregate to agree that 21 million will be the limit.

Their reward for agree is immutable money, bitcoin. Paid in blockrewards or exchange fees.