move codecov.io to devDependencies
move codecov.io to devDependencies

Snyk ignores `devDependencies`. If left in `dependencies`, Snyk complains:

[Snyk vuln report](https://snyk.io/test/npm/log-driver/1.2.6?severity=high&severity=medium&severity=low)
cainus/logdriver