feat: add telemetry build provenance

Stamp official Docker builds with a low-cardinality provenance marker and report build_provenance/image_modified in anonymous telemetry. Local and fork builds default to custom, while official GitHub/GitLab release paths mark images as official.

tests/test_webapp_payment_status.py

@@ -355,18 +355,23 @@ class WebAppPaymentStatusTests(IsolatedAsyncioTestCase):
             answer=AsyncMock(),
         )
 
-        with patch(
-            "bot.payment_providers.shared.callbacks.safe_store_provider_payment_id",
-            AsyncMock(return_value=True),
-        ) as store_id, patch(
-            "bot.payment_providers.shared.callbacks.render_payment_link",
-            AsyncMock(),
-        ) as render_link, patch(
-            "bot.payment_providers.shared.callbacks.safe_mark_failed_creation",
-            AsyncMock(),
-        ) as mark_failed, patch(
-            "bot.payment_providers.shared.callbacks.notify_payment_gateway_failure",
-            AsyncMock(),
+        with (
+            patch(
+                "bot.payment_providers.shared.callbacks.safe_store_provider_payment_id",
+                AsyncMock(return_value=True),
+            ) as store_id,
+            patch(
+                "bot.payment_providers.shared.callbacks.render_payment_link",
+                AsyncMock(),
+            ) as render_link,
+            patch(
+                "bot.payment_providers.shared.callbacks.safe_mark_failed_creation",
+                AsyncMock(),
+            ) as mark_failed,
+            patch(
+                "bot.payment_providers.shared.callbacks.notify_payment_gateway_failure",
+                AsyncMock(),
+            ),
         ):
             await render_link_or_fail(
                 callback,