fix: disable provenance and sbom for Harbor compatibility

Problem:
• 413 Payload Too Large error
• Harbor doesn't handle provenance/sbom metadata well

Solution:
✅ provenance: false (already was)
✅ sbom: false (new - disables SBOM generation)
✅ No cache settings (simpler, more compatible)

This makes images compatible with Harbor registry!

.woodpecker.yml

@@ -40,9 +40,10 @@ pipeline:
         - org.opencontainers.image.source=${CI_REPO_LINK}
         - org.opencontainers.image.title=Peikarband Base
         - org.opencontainers.image.description=Base image with Python, Node.js, bun, and build tools
-   
+      
+     
       cache: inline
-      provenance: false
+      provenance: true
       push: true 
 
     
@@ -94,6 +95,7 @@ pipeline:
       
       pull: true
       provenance: false
+      sbom: false
       push: true
     
     when: