ci: skip codecov upload on dependabot PRs

Dependabot-triggered runs don't receive Actions secrets, so
CODECOV_TOKEN is empty and the gated upload fails with
"Token required because branch is protected". Skip the step
for dependabot[bot] instead of failing CI.

Author: edge90

.github/workflows/ci.yml

@@ -199,6 +199,7 @@ jobs:
 
 
       - name: Publish to codecov
+        if: github.actor != 'dependabot[bot]'
         uses: codecov/codecov-action@v5
         with:
           fail_ci_if_error: true # we weren't posting previously