test: ensure coverage reporting token is provided

Author: Codex-

.github/workflows/test.yml

@@ -37,6 +37,8 @@ jobs:
         run: pnpm run test:coverage
       - name: codecov
         uses: codecov/codecov-action@v4
+        env:
+          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
   knip-report:
     if: ${{ github.event_name == 'pull_request' }}
     needs: [build]