Build and inspect multi-platform Docker images with Buildx, SBOMs, and SLSA provenance. See what published attestations reveal and what they don't prove.