Add integration test alongside provenance extraction validation

[benmss]

Extracting the repository URL and commit for an analysis target requires validating the results against those found within the repository. As part of adding this feature, tests will be needed to verify it with real world data. For example, retrieving an NPM provenance, extracting from it, and comparing the results with the repository URL and commits found within it for the specific version.