What is image signing and provenance in Container Security?

Signing and provenance prove where a container image came from and how it was built. In practice, the value of this concept comes from understanding where it belongs in the architecture, what problem it solves, and what constraints or tradeoffs it introduces.