fix: disable provenance/sbom in base image stage like app stage

Problem: base stage had provenance/cache that app doesn't
Solution: Match base settings to app settings

Both stages now:
  provenance: false
  sbom: false

This matches what worked before!

.woodpecker.yml

@@ -43,8 +43,9 @@ steps:
         - org.opencontainers.image.title=Peikarband Base
         - org.opencontainers.image.description=Base image with Python, Node.js, bun, and build tools
       
-      cache: inline
-      provenance: true
+      pull: true
+      provenance: false
+      sbom: false
       push: true 
 
     timeout: 30m