rearrange submodule checkouts and add CI workflows

[matt-codecov]

see also:

• monorepo prep: use contextual cache names, add working_directory input gha-workflows#41
  • which required use codecov actions to upload instead of the cli gha-workflows#42
    • which required feat: 'binary' argument to use a preinstalled cli executable test-results-action#112
• ci: use same coverage/test result filenames as other repos shared#517
• makefile changes for monorepo prep worker#1097
• makefile changes for monorepo prep codecov-api#1165

[github-actions]

✅ All tests successful. No failed tests were found.

📣 Thoughts on this report? Let Codecov know! | Powered by Codecov

[Swatinem]

left a bunch of comments, but no real blocker

[michelletran-codecov]

Thoughts on being explicit about the specific lib (i.e. libs/shared/)? It will prevent triggering on libraries that we won't import in API.

[matt-codecov]

probably a good idea. for the moment, i did it this way because i wasn't sure a change inside a submodule would register to GHA. these rules match the submodule placeholder itself so if you check out a different revision it should kick off CI

[matt-codecov]

• merged and released monorepo prep: use contextual cache names, add working_directory input gha-workflows#41 (v1.2.31)
• changed @pr41 to @v1.2.31 throughout the yaml files in this PR
• merged ci: use same coverage/test result filenames as other repos shared#517, makefile changes for monorepo prep worker#1097, makefile changes for monorepo prep codecov-api#1165
• updated apps/worker, apps/codecov-api, libs/shared to their current main branches
• turned on merge queue, branch protection, and required test/lint CI jobs to be passed

[matt-codecov]

i overrode the branch protection rule. unclear why i had to. it says i am not authorized to push to main but all the required checks passed. i will look into it for a future PR