chore(ci): remove dead Codecov upload steps + lock pins

[hyperpolymath]

Removed CI references to apps that are no longer installed on this account/org.

Why this is a fix, not a tidy-up

• Codecov was uninstalled as a GitHub App, but its action steps remain in workflows.
• The estate Actions allowlist already pruned codecov/codecov-action@* (standards/config/settings/actions-allowlist.json -> pruned_from_live_2026_09_02), so a workflow still calling it fails at job start instead of quietly no-op-ing.
• Snyk / Codacy / Mergify / ImgBot / CodeFactor are on the estate never-re-add list (standards spec §9, rulings R1/R4/R5).

Changes

• .github/workflows/ci.yml — applied

Notes

• actions.lock entries for the removed actions are deleted in this same commit (the same-PR regen rule in the CI/CD regularisation spec §6.4), so actions-lock-verify sees no drift.
• Removals are line-exact; no other line was reformatted and no comment was re-wrapped.
• Historical records (milestone logs, CHANGELOG, audit docs, specs) that describe the removal were deliberately left untouched.
• The gitar-approved label is intentionally frozen per docs/LABELS.adoc — it is not an active Gitar install, so it stays.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 96d06f15-a605-4ac0-843b-7c033b53b43e

📥 Commits

Reviewing files that changed from the base of the PR and between 13bb258 and fbb91cc.

📒 Files selected for processing (1)

• .github/workflows/ci.yml

💤 Files with no reviewable changes (1)

• .github/workflows/ci.yml

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

📜 Recent review details

⚠️ CI failures not shown inline (2)

GitHub Actions: Workflow Security Linter / 0_lint-workflows.txt: chore(ci): remove dead Codecov upload steps + lock pins

Conclusion: failure

View job details

##[group]Run errors=0
 �[36;1merrors=0�[0m
 �[36;1mfor f in .github/workflows/*.yml .github/workflows/*.yaml; do�[0m
 �[36;1m  [ -f "$f" ] || continue�[0m
 �[36;1m  if ! head -1 "$f" | grep -q "SPDX-License-Identifier"; then�[0m
 �[36;1m    echo "ERROR: $f missing SPDX header"�[0m
 �[36;1m    errors=$((errors + 1))�[0m
 �[36;1m  fi�[0m
 �[36;1mdone�[0m
 �[36;1mexit $errors�[0m
 shell: /usr/bin/bash -e {0}
 ##[endgroup]
 ERROR: .github/workflows/main-estate-audit.yml missing SPDX header
 ##[error]Process completed with exit code 1.

---

GitHub Actions: Workflow Security Linter / lint-workflows: chore(ci): remove dead Codecov upload steps + lock pins

Conclusion: failure

View job details

##[group]Run errors=0
 �[36;1merrors=0�[0m
 �[36;1mfor f in .github/workflows/*.yml .github/workflows/*.yaml; do�[0m
 �[36;1m  [ -f "$f" ] || continue�[0m
 �[36;1m  if ! head -1 "$f" | grep -q "SPDX-License-Identifier"; then�[0m
 �[36;1m    echo "ERROR: $f missing SPDX header"�[0m
 �[36;1m    errors=$((errors + 1))�[0m
 �[36;1m  fi�[0m
 �[36;1mdone�[0m
 �[36;1mexit $errors�[0m
 shell: /usr/bin/bash -e {0}
 ##[endgroup]
 ERROR: .github/workflows/main-estate-audit.yml missing SPDX header
 ##[error]Process completed with exit code 1.

---

📝 Summary

Summary by CodeRabbit

• Chores
  • Coverage reports are no longer uploaded to Codecov as part of the continuous integration test workflow.

Walkthrough

The CI test job no longer uploads coverage reports to Codecov. All other jobs remain unchanged.

Changes

CI coverage reporting

Layer / File(s)	Summary
Remove Codecov upload step .github/workflows/ci.yml	The test job no longer runs the codecov/codecov-action step for ./coverage/lcov.info.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Suggested reviewers: metadatastician

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The description explains the reason for the change and provides useful implementation notes. However, it does not follow the repository template fully. It omits the change type, related issues, testin…	Complete the required template sections. Mark the change type, list both .github/workflows/ci.yml and actions.lock, provide test steps and results, complete the relevant checklist items, and add issue links or state that none apply.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly identifies the main change: removing obsolete Codecov CI upload steps and related lock pins.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

Full details: Description check

Explanation

The description explains the reason for the change and provides useful implementation notes. However, it does not follow the repository template fully. It omits the change type, related issues, testing details and results, checklist status, and reviewer notes. It also lists only .github/workflows/ci.yml under Changes while stating that actions.lock was changed.

• Fix all pre-merge checks with AI

✨ Finishing Touches 💡 1

🛠️ Fix failing CI checks 💡

• Commit to this branch
• Create a new PR

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{A rabbit checks the workflow bright
The coverage upload leaves tonight
Tests still run in steady flow
No Codecov step remains to show
Hop, hop, clean CI rows glow}

_{Comment @coderabbitai help to get the list of available commands.}