Hide Fact::Collection#provenance_fact_subjects from the public API

* make the public API as small as possible to avoid unneeded
  implementation dependencies (POODR Chapter 4)