permit any calls to codecov.io

[srabraham]

There are apparently new calls in the codecov step to ingest.codecov.io, and now all my CI runs are failing 😭. It seems more futureproofed and minimally risky to just permit calls to any subdomain of codecov.io

https://app.stepsecurity.io/github/burningmantech/ranger-ims-server/actions/runs/11836661205?jobid=32982019292&tab=network-events

https://github.com/codecov/codecov-action/issues/1547#issuecomment-2476267485

[github-actions[bot]]

⚠️ Optional matrix job Py:3.14.0-alpha.1 - ubuntu-latest failed ⚠️

• tox prefix: test
• exit status: 1

[codecov[bot]]

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 69.09%. Comparing base (03df98e) to head (b1e0558). Report is 2 commits behind head on master.

Additional details and impacted files

```diff @@ Coverage Diff @@ ## master #1410 +/- ## ========================================== - Coverage 69.11% 69.09% -0.03% ========================================== Files 181 181 Lines 8937 8937 Branches 1496 1496 ========================================== - Hits 6177 6175 -2 - Misses 2661 2662 +1 - Partials 99 100 +1 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.

[wsanchez]

Ooh you can use wildcards. do the same with GitHub.io

[srabraham]

Ooh you can use wildcards. do the same with GitHub.io

Will do!