Codecov upload fails because CODECOV_TOKEN secret is not configured. Switch to OIDC authentication (like flowmcp-cli) which doesn't require a secret.