ci: pass codecov token and pin phpcov to v12 in mongodb/mercure jobs

| Q             | A
| ------------- | ---
| Branch?       | 4.3
| Tickets       | ∅
| License       | MIT
| Doc PR        | ∅

Codecov rejects tokenless uploads on protected branches; pass
secrets.CODECOV_TOKEN to every codecov-action step. Also pin the
remaining unpinned phpcov downloads to phpcov-12.phar so coverage
merge stops failing against php-code-coverage 12.x.

Author: soyuka

.github/workflows/ci.yml

@@ -291,6 +291,7 @@ jobs:
         if: matrix.coverage
         uses: codecov/codecov-action@v5
         with:
+          token: ${{ secrets.CODECOV_TOKEN }}
           directory: build/logs/phpunit
           name: phpunit-php${{ matrix.php }}
           flags: phpunit
@@ -380,6 +381,7 @@ jobs:
         if: matrix.coverage
         uses: codecov/codecov-action@v5
         with:
+          token: ${{ secrets.CODECOV_TOKEN }}
           directory: /tmp/build/logs/phpunit
           name: phpunit-php${{ matrix.php }}
           flags: phpunit
@@ -521,6 +523,7 @@ jobs:
         if: matrix.coverage
         uses: codecov/codecov-action@v5
         with:
+          token: ${{ secrets.CODECOV_TOKEN }}
           directory: build/logs/behat
           name: behat-php${{ matrix.php }}-shard${{ matrix.shard }}
           flags: behat
@@ -703,7 +706,7 @@ jobs:
           vendor/bin/behat --out=std --format=progress --format=junit --out=build/logs/behat/junit --profile=mongodb-coverage --no-interaction
       - name: Merge code coverage reports
         run: |
-          wget -qO /usr/local/bin/phpcov https://phar.phpunit.de/phpcov.phar
+          wget -qO /usr/local/bin/phpcov https://phar.phpunit.de/phpcov-12.phar
           chmod +x /usr/local/bin/phpcov
           mkdir -p build/coverage
           phpcov merge --clover build/logs/behat/clover.xml build/coverage
@@ -718,6 +721,7 @@ jobs:
       - name: Upload coverage results to Codecov
         uses: codecov/codecov-action@v5
         with:
+          token: ${{ secrets.CODECOV_TOKEN }}
           directory: build/logs/behat
           name: behat-php${{ matrix.php }}
           flags: behat
@@ -793,7 +797,7 @@ jobs:
           vendor/bin/behat --out=std --format=progress --format=junit --out=build/logs/behat/junit --profile=mercure-coverage --no-interaction
       - name: Merge code coverage reports
         run: |
-          wget -qO /usr/local/bin/phpcov https://phar.phpunit.de/phpcov.phar
+          wget -qO /usr/local/bin/phpcov https://phar.phpunit.de/phpcov-12.phar
           chmod +x /usr/local/bin/phpcov
           mkdir -p build/coverage
           phpcov merge --clover build/logs/behat/clover.xml build/coverage
@@ -808,6 +812,7 @@ jobs:
       - name: Upload coverage results to Codecov
         uses: codecov/codecov-action@v5
         with:
+          token: ${{ secrets.CODECOV_TOKEN }}
           directory: build/logs/behat
           name: behat-php${{ matrix.php }}
           flags: behat
@@ -1275,6 +1280,7 @@ jobs:
         if: matrix.coverage
         uses: codecov/codecov-action@v5
         with:
+          token: ${{ secrets.CODECOV_TOKEN }}
           directory: build/logs/phpunit
           name: phpunit-php${{ matrix.php }}
           flags: phpunit