fix: disable provenance/sbom attestation for SWR compatibility

Huawei SWR does not support OCI attestation manifests that
build-push-action@v6 generates by default, causing
'fail to parse manifest.json' on push.

Author: yunyu950908

.github/workflows/build-swr.yml

@@ -42,5 +42,7 @@ jobs:
           tags: |
             ${{ env.SWR_IMG }}:${{ env.SHORT_SHA }}
             ${{ env.SWR_IMG }}:latest
+          provenance: false
+          sbom: false
           cache-from: type=gha
           cache-to: type=gha,mode=max