opt out of automatic attestations

[jameslamb]

Closes #820

(description copied from #820 (comment))

build-*-manifest CI jobs are failing like this:

docker.io/rapidsai/staging:docker-cuvs-bench-820-26.02a-cuda13-py3.10-amd64 is a manifest list
Error: Process completed with exit code 1.

(build link)

Looks like in newer versions of docker, builds create manifest lists by default instead of single image builds:

• [docker-build] ensure provenance is disabled during image builds NVIDIA/gpu-operator#1940
• Add build options for Docker image attestation control NVIDIA/k8s-driver-manager#132
• BUILDX_NO_DEFAULT_ATTESTATIONS not respected after v5.3.0 docker/build-push-action#1339 (comment)

This opts out of that using the configuration option added in docker/build-push-action#1343

It also updates all pre-commit hooks, to avoid needing another CI run for #820

[jameslamb]

/merge