chore(ci): remove dead Codecov upload steps + lock pins (#211)

Removed CI references to apps that are no longer installed on this
account/org.

### Why this is a fix, not a tidy-up
- Codecov was uninstalled as a GitHub App, but its action steps remain
in workflows.
- The estate Actions allowlist already pruned `codecov/codecov-action@*`
(`standards/config/settings/actions-allowlist.json` ->
`pruned_from_live_2026_09_02`), so a workflow still calling it fails at
job start instead of quietly no-op-ing.
- Snyk / Codacy / Mergify / ImgBot / CodeFactor are on the estate
never-re-add list (`standards` spec §9, rulings R1/R4/R5).

### Changes
-
`asdf-augmenters/asdf-acceleration-middleware/.github/workflows/ci.yml`
— applied
-
`asdf-augmenters/asdf-acceleration-middleware/.github/workflows/rust-ci.yml`
— applied
-
`rescript-ecosystem/packages/tooling/evangeliser/.github/workflows/ci.yml`
— applied
- `rescript-ecosystem/rescript-evangeliser/.github/workflows/ci.yml` —
applied

### Notes
- `actions.lock` entries for the removed actions are deleted in this
same commit (the same-PR regen rule in the CI/CD regularisation spec
§6.4), so `actions-lock-verify` sees no drift.
- Removals are line-exact; no other line was reformatted and no comment
was re-wrapped.
- Historical records (milestone logs, CHANGELOG, audit docs, specs) that
*describe* the removal were deliberately left untouched.
- The `gitar-approved` label is intentionally frozen per
`docs/LABELS.adoc` — it is not an active Gitar install, so it stays.

Author: hyperpolymath

asdf-augmenters/asdf-acceleration-middleware/.github/workflows/ci.yml

@@ -78,9 +78,6 @@ jobs:
       - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6  # v2
       - run: cargo install cargo-tarpaulin
       - run: cargo tarpaulin --all --out Xml
-      - uses: codecov/codecov-action@ab904c41d6ece82784817410c45d8b8c02684457  # v3
-        with:
-          files: ./cobertura.xml
   rsr-compliance:
     name: RSR Compliance
     runs-on: ubuntu-latest

asdf-augmenters/asdf-acceleration-middleware/.github/workflows/rust-ci.yml

@@ -42,6 +42,3 @@ jobs:
         run: cargo install cargo-tarpaulin
       - name: Generate coverage
         run: cargo tarpaulin --out Xml
-      - uses: codecov/codecov-action@ab904c41d6ece82784817410c45d8b8c02684457  # v3
-        with:
-          files: cobertura.xml

rescript-ecosystem/packages/tooling/evangeliser/.github/workflows/ci.yml

@@ -50,13 +50,6 @@ jobs:
         run: |
           cd extension
           npm run test:coverage
-      - name: Upload coverage to Codecov
-        if: matrix.os == 'ubuntu-latest'
-        uses: codecov/codecov-action@ab904c41d6ece82784817410c45d8b8c02684457  # v3
-        with:
-          files: ./extension/coverage/lcov.info
-          flags: unittests
-          name: codecov-umbrella
   security:
     name: Security Audit
     runs-on: ubuntu-latest

rescript-ecosystem/rescript-evangeliser/.github/workflows/ci.yml

@@ -51,13 +51,6 @@ jobs:
         run: |
           cd extension
           npm run test:coverage
-      - name: Upload coverage to Codecov
-        if: matrix.os == 'ubuntu-latest'
-        uses: codecov/codecov-action@ab904c41d6ece82784817410c45d8b8c02684457 # v3
-        with:
-          files: ./extension/coverage/lcov.info
-          flags: unittests
-          name: codecov-umbrella
   security:
     name: Security Audit
     runs-on: ubuntu-latest