website/docs: clarify when provisioners are run [GH-2541]