break out codecove upload workflow from docs.yml to its own workflow

[sbillinge]

We want the upload to codecov to only run on merge to main.

This is currently handled by having it in the docs.yml workflow that only builds and deploys docs on merge to main. But it would be clearer and cleaner if we made the intent explicit by putting it in a separate workflow with a clearer name.