base_model -> true upstream origin (openai/whisper-small)

correct licence to apache-2.0 (matches upstream base)

provenance card