Deploy swh-provenance in production

swh-provenance should be deployed as as simple swh RPC service; it should run using gunicorn loading swh.provenance.api.server:make_app_from_configfile()

This first version is very minimalistic and only depends on accessing swh.graph's GRPC server.

It will then be used from the web-app (via a new public API endpoints).

The configuration should consist simply in something like:

provenance:
  cls: graph
  url: <gprc-srv-ip>:50091

Draft specification: https://hedgedoc.softwareheritage.org/LsrKvOq7QJ6sbdcE5Rr3tA

Plan:

• Deploy in production
  • Add CNAME to provenance.internal.softwarheritage.org
  • Add secrets for the deployment to be functional
  • swh/infra/ci-cd/swh-charts!468 (merged): Add provenance instance, open webapp's provenance api endpoints
  • Deploy
• Add grafana tag
• swh/devel/swh-docs!441 (merged): Update service urls documentation
• Metrics
  • Ingress [1]
  • gunicorn [2]

[1] https://grafana.softwareheritage.org/goto/Al_g6Z6Ik?orgId=1

[2] https://grafana.softwareheritage.org/goto/Blmi6WeIz?orgId=1

Depends on #5398 (closed)