ci: publish coverage to Codecov, one flag per tier (#370)