Set fail_ci_if_error: true for Codecov once stable

Once Codecov uploads are consistently successful, flip `.github/workflows/ci-test.yml`:

```yaml
- fail_ci_if_error: false
+ fail_ci_if_error: true
```

This will enforce that coverage upload failures block PRs, ensuring no coverage gaps slip through.