Set SHA for codecov upload
Just a test.
This seems to have helped (xref https://github.com/pandas-dev/pandas/pull/28069). Something with how codecov was fixing merge commits was going awry on the 0.25.x branch. I'm going to merge and backport.