Nicolás Alonso

This solves https://github.com/lynndylanhurley/devise_token_auth/issues/1548

Instead of adding `extra_build_args: '--provenance=false'` you can create an Environment variable on the project or context with `BUILDX_NO_DEFAULT_ATTESTATIONS=1`. Doing it in this way you don't need to change the code...

@bjohnso5 Could you help me move this forward? Happy to receive comments. Thanks in advance!