permit any calls to codecov.io

there are new calls in the codecov step to
ingest.codecov.io
https://app.stepsecurity.io/github/burningmantech/ranger-ims-server/actions/runs/11836661205?jobid=32982019292&tab=network-events

codecov/codecov-action#1547 (comment)

.github/workflows/cicd.yml

@@ -188,16 +188,14 @@ jobs:
           disable-file-monitoring: true
           egress-policy: block
           allowed-endpoints: >
-            api.codecov.io:443
+            *.codecov.io:443
             api.github.com:443
-            cli.codecov.io:443
             codecov.io:443
             files.pythonhosted.org:443
             github.com:443
             objects.githubusercontent.com:443
             pypi.org:443
             storage.googleapis.com:443
-            uploader.codecov.io:443
 
       - name: Checkout source code
         uses: actions/checkout@v4