Fix param value ordering in materials

Prior to the fix, when generating `materials` section of the intoto
attestation, Chains gets the param value from TaskRun spec first and then
default from Task spec. This overwriting will cause the problem that
the actual value used in run is from taskrun spec, but the value recorded
in `materials` is the value defined in task spec's `default`.

In this PR, we fix the issue.

Bump github.com/golangci/golangci-lint from 1.46.2 to 1.47.1

Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.46.2 to 1.47.1.
- [Release notes](https://github.com/golangci/golangci-lint/releases)
- [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md)
- [Commits](golangci/golangci-lint@v1.46.2...v1.47.1)

---
updated-dependencies:
- dependency-name: github.com/golangci/golangci-lint
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Merge pull request tektoncd#472 from priyawadhwa/update-pipelines

Add option to specify provider for fulcio id token

Bump go-containerregistry and k8schain to pick up new cred helpers

Add installation instructions for OpenShift

This commit documents the steps required to install Chains on OpenShift.

Fix bug in uploading signatures to OCI

We should be using `SignedEntity` instead of `SignedImage` to account for manifest lists that may be signed by cosign.

Deprecate the `tekton-provenance` predicate format

For now, this will still work but we just print the error message.
It can be removed in a future release, and I removed all docs around it as well.

Add tutorial for generating signed provenance

This should help people set up signing OCI images and generating signed provenance for them.

Fix GIT_URL in release Pipeline