[feature] Rename attestation.intoto.jsonl to provenance.intoto.jsonl

[laurentsimon]

Shall we rename the default provenance filename for the generic workflows?

Maybe slsa3-provenance.intoto.jsonl or simply provenance.intoto.jsonl?

@ianlewis wdut?

[ianlewis]

The original intent was to indicate that it was the provenance was signed and included the signature, but maybe provenance makes more sense since I think most folks will be more familiar with that.

[ianlewis]

BTW, the in-toto attestation doc states:

• Bundles that concern a single artifact SHOULD name the bundle file <artifact filename>.intoto.jsonl.
• Bundles that concern multiple artifacts SHOULD name the bundle file multiple.intoto.jsonl.

So maybe we should be adhering to this as the default file names.

[laurentsimon]

LGTM.