Provenance should be clearer

[leonitousconforti]

Right now the building of the submodules could be clearer (shouldn't have to call a js script that calls a bash script ect) and it isn't clear where I got winTun from.

I would like to make the building of the submodules leaner so that the provenance logs are easier to read and clearer, and I need to add a script that aquires signed wintun binaries somehow that makes it clear where they are coming from