Add configuration source reporting

internal/config/effective_digest.go

@@ -13,8 +13,9 @@ const pipelineDefaultOwnershipSource = "default"
 // PipelineProfileProvenance identifies the profile selected while resolving a
 // pipeline. It contains only non-secret selection metadata.
 type PipelineProfileProvenance struct {
-	Name   string
-	Source string
+	Name        string
+	Source      string
+	OverlayPath string
 }
 
 // SelectedPipelineProfile reports the profile used to resolve cfg, if any.
@@ -23,7 +24,7 @@ func SelectedPipelineProfile(cfg *PipelineConfig) (*PipelineProfileProvenance, b
 		return nil, false
 	}
 	selection := cfg.resolution.selectedProfile
-	return &PipelineProfileProvenance{Name: selection.name, Source: selection.source}, true
+	return &PipelineProfileProvenance{Name: selection.name, Source: selection.source, OverlayPath: selection.overlayPath}, true
 }
 
 // EffectivePipelineDigest reports the deterministic secret-free digest for a