ci: opt-in sbom and provenance

[crazy-max]

fixes #3337

Signed-off-by: CrazyMax crazy-max@users.noreply.github.com

[jedevc]

#3362 still appears to be an issue on this.

[crazy-max]

https://github.com/moby/buildkit/actions/runs/3670005717/jobs/6204266362#step:6:437

#70 [integration-tests 1/1] COPY . .
#70 DONE 3.6s

#71 exporting to docker image format
#71 ERROR: docker exporter does not currently support exporting manifest lists
------
 > exporting to docker image format:
------
ERROR: failed to solve: docker exporter does not currently support exporting manifest lists
Error: Process completed with exit code 1.

Looks like docker/buildx#1412 breaks docker exporter.

EDIT: Opened docker/buildx#1460 to add a simple test to load to docker store and seems it fails using BuildKit master image only: https://github.com/docker/buildx/actions/runs/3670274233/jobs/6204712919