Do you have to own an NFT to link a public credential with it?

No. Anyone with a KILT DID can add any information to any NFT via a public credential anchored on the KILT blockchain. The credential is linked via the AssetDID of the NFT. The AssetDID is generated from public knowledge about the NFT, such as the blockchain it is on, and standard identifiers.