Add Aikido Code Coverage

[mattgek]

No description provided.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[aikido-pr-checks]

🟡 Medium - All branch pushes now run credentialed coverage jobs

Removing the push branch filter makes this workflow execute its coverage paths for every branch push, not just the protected main branch. A user who can push a branch can therefore change the workflow on that branch and use the newly reachable id-token: write job or the Codecov step's repository token to exfiltrate credentials or mint a trusted OIDC identity, whereas the former main-only trigger prevented non-main branch workflows from reaching them. This expands the privileged workflow trust boundary to unprotected branches.

Suggested change

	push:
	push:
	branches:
	- main

_{More info - Reply on this comment to give feedback or ignore the issue.}