v0.0.2-test-provenance

Changelog

• 5451ba4 ci: use goreleaser metadata output for checksum filename
• b841126 ci: fix checksum filename by stripping v prefix and add minimal test config