Add CI job checking test coverage (preferably using kcov)

[robinlinden]

kcov is cool and doesn't require instrumentation (and seems to work without any issues w/ stdlib2). gcov requires instrumentation that adds secret function calls we don't have yet.