[backend] handle container provenance files like the other attestations

We used to read them into memory instead of creating a hard link.