feat: docker provenance support

[miki725]

• [x] Followed the steps in the contributor's guide: https://crashoverride.com/docs/other/contributing#filing-the-pull-request
• [x] PR title uses semantic commit messages
• [x] Filled out the template to a useful degree
• [x] Updated CHANGELOG.md if necessary

Issue

fixes https://github.com/crashappsec/chalk/issues/180 fixes https://github.com/crashappsec/chalk/issues/277 fixes https://github.com/crashappsec/chalk/pull/282

Description

see commit message(s)

this PR is an extension to https://github.com/crashappsec/chalk/pull/266

Testing

make tests

for non-buildx testing something like:

➜ echo FROM alpine | docker run -i --rm -v /var/run/docker.sock:/var/run/docker.sock -v /etc/chalk.c4m:/etc/chalk.c4m -v ./chalk:/chalk docker:19 /chalk --trace docker build -f - -t test .

created https://github.com/crashappsec/chalk/issues/283 to improve in the future