Update ci/cd: add codecov upload steps

[arkid15r]

Proposed change

Let's add codecov!

Checklist

• Required: I followed the contributing workflow
• Required: I verified that my code works as intended and resolves the issue as described
• Required: I ran make check-test locally: all warnings addressed, tests passed
• I used AI for code, documentation, tests, or communication related to this PR

[coderabbitai]

Summary by CodeRabbit

• Chores
  • Enhanced CI/CD pipeline with improved security (OIDC token permissions)
  • Optimized backend and frontend test execution with better container lifecycle management
  • Added automated code coverage reports to Codecov for both backend and frontend projects with configurable coverage targets (80%) and thresholds

_{✏️ Tip: You can customize this high-level summary in your review settings.}

Walkthrough

Adds OIDC-enabled Codecov uploads and refactors backend/frontend test jobs to run inside explicit container lifecycles; also adds coverage XML output for pytest and switches Jest to Cobertura reporting.

Changes

Cohort / File(s)	Summary
CI/CD workflow .github/workflows/run-ci-cd.yaml	Added id-token: write permission. Reworked backend and frontend test jobs to create/start containers, capture exit codes, copy coverage artifacts, remove containers, and exit with captured codes. Added Codecov upload steps (use_oidc: true, fail_ci_if_error: false, flags per suite).
Codecov configuration .codecov.yml	Added Codecov configuration: require_ci_to_pass: true, comment layout, per-project coverage targets (backend/frontend 80% target), and path-based flags with carryforward.
Backend coverage config backend/pyproject.toml	Added --cov-report=xml to pytest addopts to generate XML coverage reports.
Frontend coverage config frontend/jest.config.ts	Replaced Jest coverage reporters ['text','lcov','html','json-summary'] with ['cobertura','lcov','text'].
Spellcheck dictionary cspell/custom-dict.txt	Added token carryforward.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~20 minutes

Suggested labels

backend-tests

Suggested reviewers

• kasya

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly and concisely describes the main change: adding Codecov upload steps to the CI/CD pipeline, which matches the core objective of the changeset.
Description check	✅ Passed	The description is directly related to the changeset, proposing to add Codecov functionality to the CI/CD pipeline as evidenced by the changes across all modified files.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch ark/implement-codecov-upload

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[codecov]

Welcome to Codecov 🎉

Once you merge this PR into your default branch, you're all set! Codecov will compare coverage reports and display results in all future pull requests.

Thanks for integrating Codecov - We've got you covered ☂️

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud