chore(codecov): codecov refactored into collect and upload workflows (#34461)

### Issue # (if applicable)
same as 
#34247
#34211

Closes #<issue number here>.

### Reason for this change
collect workflow runs with limited permissions
upload workflow runs on elevated permissions


### Description of changes



### Describe any new or updated permissions being added




### Description of how you validated changes



### Checklist
- [ x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

Author: QuantumNeuralCoder

.github/workflows/codecov-upload.yml

@@ -9,6 +9,7 @@ on:
 permissions:
   contents: write
   id-token: write
+  actions: read
 
 jobs:
   upload:
@@ -24,6 +25,7 @@ jobs:
         with:
           name: coverage-artifacts
           path: ./coverage
+          github-token: ${{ secrets.GITHUB_TOKEN }}
           repository: ${{ github.repository }}
           run-id: ${{ github.event.workflow_run.id }}