Fix premature Codecov status checks

Restructure workflow so Test and Acceptance jobs save coverage as
artifacts, then a new Upload job waits for both to complete before
uploading all reports together, ensuring Codecov receives complete data
in a single batch instead of calculating status prematurely.

Ref: https://issues.redhat.com/browse/EC-1591
Assisted-by: Claude

Author: Acepresso

.github/workflows/checks-codecov.yaml

@@ -85,32 +85,15 @@ jobs:
       - name: Test
         run: make test
 
-      - name: Upload unit test coverage report
-        uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24 # v5.4.3
-        env:
-          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
-        with:
-          files: ./coverage-unit.out
-          disable_search: true
-          flags: unit
-
-      - name: Upload generative test coverage report
-        uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24 # v5.4.3
-        env:
-          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
-        with:
-          files: ./coverage-generative.out
-          disable_search: true
-          flags: generative
-
-      - name: Upload integration test coverage report
-        uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24 # v5.4.3
-        env:
-          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+      - name: Upload test coverage artifacts
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.0
         with:
-          files: ./coverage-integration.out
-          disable_search: true
-          flags: integration
+          name: coverage-test
+          path: |
+            ./coverage-unit.out
+            ./coverage-generative.out
+            ./coverage-integration.out
+          retention-days: 1
 
   Acceptance:
     runs-on: ubuntu-latest
@@ -149,12 +132,68 @@ jobs:
         id: acceptance_test
         run: E2E_INSTRUMENTATION=true make acceptance
 
-      - name: Upload coverage report
+      - name: Upload acceptance coverage artifact
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.0
+        with:
+          name: coverage-acceptance
+          path: ./coverage-acceptance.out
+          retention-days: 1
+
+  Upload Coverage Statistics:
+    runs-on: ubuntu-latest
+    needs: [Test, Acceptance]
+    steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
+        with:
+          egress-policy: audit
+          disable-telemetry: true
+
+      - name: Download test coverage artifacts
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
+        with:
+          name: coverage-test
+          path: ./coverage
+
+      - name: Download acceptance coverage artifact
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
+        with:
+          name: coverage-acceptance
+          path: ./coverage
+
+      - name: Upload unit test coverage report
+        uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24 # v5.4.3
+        env:
+          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+        with:
+          files: ./coverage/coverage-unit.out
+          disable_search: true
+          flags: unit
+
+      - name: Upload generative test coverage report
+        uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24 # v5.4.3
+        env:
+          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+        with:
+          files: ./coverage/coverage-generative.out
+          disable_search: true
+          flags: generative
+
+      - name: Upload integration test coverage report
+        uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24 # v5.4.3
+        env:
+          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+        with:
+          files: ./coverage/coverage-integration.out
+          disable_search: true
+          flags: integration
+
+      - name: Upload acceptance test coverage report
         uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24 # v5.4.3
         env:
           CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
         with:
-          files: ./coverage-acceptance.out
+          files: ./coverage/coverage-acceptance.out
           disable_search: true
           flags: acceptance