ci: configure Codecov coverage uploads (#150)

.github/workflows/ci.yml

@@ -191,9 +191,8 @@ jobs:
   coverage:
     name: Coverage
     runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      id-token: write
+    env:
+      CODECOV_TOKEN_CONFIGURED: ${{ secrets.CODECOV_TOKEN != '' }}
     steps:
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
@@ -232,25 +231,39 @@ jobs:
         run: pnpm run test:coverage:ts
 
       - name: Upload TypeScript coverage
+        if: env.CODECOV_TOKEN_CONFIGURED == 'true'
         uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # v5.5.4
         with:
-          use_oidc: true
+          token: ${{ secrets.CODECOV_TOKEN }}
+          slug: Kaelio/ktx
           files: ./packages/cli/coverage/lcov.info,./packages/connector-bigquery/coverage/lcov.info,./packages/connector-clickhouse/coverage/lcov.info,./packages/connector-mysql/coverage/lcov.info,./packages/connector-postgres/coverage/lcov.info,./packages/connector-snowflake/coverage/lcov.info,./packages/connector-sqlite/coverage/lcov.info,./packages/connector-sqlserver/coverage/lcov.info,./packages/context/coverage/lcov.info,./packages/llm/coverage/lcov.info
           flags: typescript
           name: typescript
-          fail_ci_if_error: false
+          disable_search: true
+          fail_ci_if_error: true
+
+      - name: Warn when Codecov token is missing for TypeScript
+        if: env.CODECOV_TOKEN_CONFIGURED != 'true'
+        run: echo "::warning::CODECOV_TOKEN is not configured; skipping TypeScript coverage upload"
 
       - name: Generate Python coverage
         run: pnpm run test:coverage:py
 
       - name: Upload Python coverage
+        if: env.CODECOV_TOKEN_CONFIGURED == 'true'
         uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # v5.5.4
         with:
-          use_oidc: true
+          token: ${{ secrets.CODECOV_TOKEN }}
+          slug: Kaelio/ktx
           files: ./coverage/python.xml
           flags: python
           name: python
-          fail_ci_if_error: false
+          disable_search: true
+          fail_ci_if_error: true
+
+      - name: Warn when Codecov token is missing for Python
+        if: env.CODECOV_TOKEN_CONFIGURED != 'true'
+        run: echo "::warning::CODECOV_TOKEN is not configured; skipping Python coverage upload"
 
   artifact-checks:
     name: Artifact checks