Extend provenance file wrapper to read the builder ID

[aferr]

The authorizaiton logic policies will depend on which trusted builder produced the provenance file. The builder ID shows up under the builder predicate here. The other tooling around transparent release does not support this field yet, so this issue depends on adding support for getting this builder field from provenance files.

(information provided by @rbehjati )