Switch Docker builds from OCI to Docker v2 manifests

Quay.io responds to Docker v2 manifest requests with a wrong answer
(a v1 manifest) when the v2 manifest does not exist, which happens
because the current build produces OCI-format manifests. This causes
problems for tools like Cromwell that expect Docker v2 format.

Changes:
- Set provenance: false to disable OCI-only attestation manifests
- Set sbom: false to disable SBOM attestation
- Use outputs with oci-mediatypes=false to force Docker v2 media types
- Move push control into outputs parameter

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: dpark01

.github/workflows/docker-build.yml

@@ -77,9 +77,11 @@ jobs:
         with:
           context: .
           platforms: linux/amd64,linux/arm64
-          push: ${{ github.event_name == 'push' }}
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
+          provenance: false
+          sbom: false
+          outputs: type=image,push=${{ github.event_name == 'push' }},oci-mediatypes=false
           cache-from: type=gha
           cache-to: type=gha,mode=max