Allow repo and commit extraction from provenance to be independent

In the current implementation, the provenance extractor will only succeed if it can retrieve both the repo URL and the commit. In some cases it may make sense to allow one of these to be absent, meaning extraction could conclude with a partial success: A repo URL, or a commit.