Scope CLI coverage to cli.py and _cli_support.py, enforce 100%

The previous attempt used --cov with file paths, but --cov only accepts
packages/directories. Now using --cov=src/docket --cov=tests/cli with an
explicit omit list in .coveragerc-cli that excludes all non-CLI source.
Only cli.py, _cli_support.py, and tests/cli/ helper modules are measured.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: chrisguidry

.coveragerc-cli

@@ -2,13 +2,33 @@
 branch = true
 parallel = true
 omit =
-    src/docket/__main__.py
-    src/docket/_uuid7.py
+    src/docket/__*.py
+    src/docket/_cancellation.py
+    src/docket/_docket_snapshot.py
+    src/docket/_execution_progress.py
     src/docket/_prometheus_exporter.py
+    src/docket/_redis.py
     src/docket/_result_store.py
+    src/docket/_telemetry.py
+    src/docket/_uuid7.py
+    src/docket/agenda.py
+    src/docket/annotations.py
+    src/docket/dependencies/*
+    src/docket/docket.py
+    src/docket/execution.py
+    src/docket/instrumentation.py
+    src/docket/strikelist.py
+    src/docket/tasks.py
+    src/docket/testing.py
+    src/docket/worker.py
     **/conftest.py
-    tests/_key_leak_checker.py
-    tests/_container.py
+    tests/_*.py
+    tests/test_*.py
+    tests/cluster/*
+    tests/concurrency_limits/*
+    tests/fundamentals/*
+    tests/instrumentation/*
+    tests/worker/*
 
 [report]
 exclude_also = ["\\.\\.\\.$"]

.github/workflows/ci.yml

@@ -160,7 +160,14 @@ jobs:
       - name: Run CLI tests
         env:
           REDIS_VERSION: "8.0"
-        run: uv run pytest tests/cli/ --cov-config=.coveragerc-cli --cov-fail-under=0 --cov-report=xml --cov-report=term-missing:skip-covered
+        run: >
+          uv run pytest tests/cli/
+          -o 'addopts=--import-mode=importlib'
+          --numprocesses=logical --maxprocesses=4
+          --cov=src/docket --cov=tests/cli
+          --cov-branch --cov-config=.coveragerc-cli --cov-fail-under=100
+          --cov-report=xml --cov-report=term-missing:skip-covered
+          --timeout=30
 
       - name: Upload coverage reports to Codecov
         uses: codecov/codecov-action@v5