Release v0.21.0

write metadata when test image provisioning fails

Put it in the provision-log directory as JSON. Currently, the only
captured value is the exit code. This allows some
machine-readable distinction by an external observer about why exactly
the test image provisioning failed.