chore(ci): enable provenance and enrich OCI metadata for docker images
chore(ci): align dev and prod docker builds with multi-arch release
chore(ci): enable provenance mode=max for image build
chore(ci): fix multi-arch build to support provenance mode=max
chore(docker): install corepack in build image with npm
chore(ci): use action for gpg import