aec7a910f0
build-push-action@v7 generates OCI attestation manifests by default. Forgejo's registry doesn't support OCI image index format with attestations, causing the push to fail with "unknown". provenance: false disables this. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>