A provenance upload job fails only on self-hosted Windows runners

The build artifact exists, yet the attestation job cannot find it because the platform-specific sanitization path changed the stored name.