fix: set use_oidc to false for PRs from fork repos

.github/workflows/test.yaml

@@ -39,6 +39,6 @@ jobs:
       - name: Upload coverage reports to Codecov
         uses: codecov/codecov-action@v4
         with:
-          use_oidc: true
+          use_oidc: ${{ !(github.event_name == 'pull_request' && github.event.pull_request.head.repo.fork) }}
       - name: Minimize uv cache
         run: uv cache prune --ci