1. 1. Summary

Keep the normal .bazel_build_invocation for ordinary build artifacts while writing task-specific provenance invocation files from the primary Bazel command. Archive and release package provenance now use the dedicated invocation, and crypt provenance uses its own file; stale dedicated files are removed before each compile.

1. 1. Testing

• bazel test //evergreen:bazel_evergreen_shutils_test //buildscripts/tests:test_package_test_provenance
• bazel run format (attempted; the formatter wrapper failed to link because mold rejected an LTO object)