chore(ci): remove dead Codecov upload steps + lock pins

[hyperpolymath]

Removed CI references to apps that are no longer installed on this account/org.

Why this is a fix, not a tidy-up

• Codecov was uninstalled as a GitHub App, but its action steps remain in workflows.
• The estate Actions allowlist already pruned codecov/codecov-action@* (standards/config/settings/actions-allowlist.json -> pruned_from_live_2026_09_02), so a workflow still calling it fails at job start instead of quietly no-op-ing.
• Snyk / Codacy / Mergify / ImgBot / CodeFactor are on the estate never-re-add list (standards spec §9, rulings R1/R4/R5).

Changes

• journal-theme/.github/workflows/ci.yml — applied
• journal-theme/.github/workflows/rust-ci.yml — applied
• praxis/.github/workflows/test.yml — applied
• project-wharf/.github/workflows/rust-ci.yml — applied

Notes

• actions.lock entries for the removed actions are deleted in this same commit (the same-PR regen rule in the CI/CD regularisation spec §6.4), so actions-lock-verify sees no drift.
• Removals are line-exact; no other line was reformatted and no comment was re-wrapped.
• Historical records (milestone logs, CHANGELOG, audit docs, specs) that describe the removal were deliberately left untouched.
• The gitar-approved label is intentionally frozen per docs/LABELS.adoc — it is not an active Gitar install, so it stays.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 3bd0da3d-0076-4a9f-bca7-4fbbf757f06d

📥 Commits

Reviewing files that changed from the base of the PR and between 1628d9e and bf9cc80.

📒 Files selected for processing (4)

• journal-theme/.github/workflows/ci.yml
• journal-theme/.github/workflows/rust-ci.yml
• praxis/.github/workflows/test.yml
• project-wharf/.github/workflows/rust-ci.yml

💤 Files with no reviewable changes (4)

• project-wharf/.github/workflows/rust-ci.yml
• journal-theme/.github/workflows/rust-ci.yml
• journal-theme/.github/workflows/ci.yml
• praxis/.github/workflows/test.yml

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

📜 Recent review details

⏰ Context from checks skipped due to timeout. (3)

• GitHub Check: Analyze (rust)
• GitHub Check: Analyze (actions)
• GitHub Check: Analyze (javascript-typescript)

---

📝 Summary

Summary by CodeRabbit

• Chores
  • Removed automated Codecov uploads from PHP, JavaScript, Rust, Elixir and combined test workflows.
  • Added a dedicated Rust coverage job that generates an XML coverage report.
  • Simplified the JavaScript test workflow by removing dashboard dependency installation and dashboard test execution.
  • Existing formatting, linting, testing, build and security checks remain unchanged.

Walkthrough

The changes remove Codecov upload steps from coverage workflows in three repositories. The Praxis bun job also removes dashboard testing and keeps coverage testing for the swarm directory.

Changes

Coverage workflow cleanup

Layer / File(s)	Summary
Remove Codecov uploads .github/workflows/ci.yml, .github/workflows/rust-ci.yml, praxis/.github/workflows/test.yml, project-wharf/.github/workflows/rust-ci.yml	The workflows no longer upload PHP, JavaScript, Rust, Elixir, or combined coverage reports to Codecov. Coverage generation remains in the affected jobs.
Limit bun coverage tests praxis/.github/workflows/test.yml	The bun job no longer installs or tests the dashboard. It continues to test the SymbolicEngine/swarm directory.

Priority: ⬇️ Low

Estimated code review effort: 2 (Simple) | ~10 minutes

Change: Bug fix

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly identifies the main change: removing obsolete Codecov CI steps and lock pins.
Description check	✅ Passed	The description directly explains the removal of obsolete Codecov references, affected workflows, lock-entry updates, and preserved historical records.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{A rabbit checks the workflow stream
No Codecov uploads cross the beam
Rust and PHP reports stay in place
JavaScript follows the same pace
Swarm tests hop through the pipeline clean}

_{Comment @coderabbitai help to get the list of available commands.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud