fix(ci): use coverage report --fail-under (not the pytest-cov --cov-fail-under)

The coverage-combine gate called 'coverage report --cov-fail-under=60', but
--cov-fail-under is a pytest-cov flag; the coverage CLI uses --fail-under.
'coverage report' errored 'no such option'.

Author: fgogolli

makefiles/ci.mk

@@ -165,10 +165,12 @@ ci-tests-infrastructure:  ## Run infrastructure tests only (matches ci.yml infra
 	@echo "Running infrastructure tests (parallel)..."
 	$(call run-tool,pytest,$(TESTS_INFRASTRUCTURE) $(PYTEST_PARALLEL) $(PYTEST_ARGS) $(PYTEST_COV_ARGS) --cov-report=xml:coverage-infrastructure.xml --junitxml=junit-infrastructure.xml)
 
-ci-tests-coverage-check:  ## Local combined-coverage check (CI enforces the floor via codecov.yml project status)
+ci-tests-coverage-check:  ## Combined-coverage gate: merge per-leg data + enforce threshold
 	@echo "Combining per-leg coverage data and checking combined threshold ($(COVERAGE_THRESHOLD)%)..."
 	$(call run-tool,coverage,combine)
-	$(call run-tool,coverage,report $(PYTEST_COV_FAIL_UNDER))
+	# `coverage report` uses --fail-under (the pytest-cov spelling
+	# --cov-fail-under is not valid for the coverage CLI).
+	$(call run-tool,coverage,report --fail-under=$(COVERAGE_THRESHOLD))
 
 # @SECTION UI Build