Pass the codecov token in CI to the uploader via the environment (#1737)

* trying with the env way now

Author: ssteinbach

.github/workflows/python-package.yml

@@ -160,10 +160,12 @@ jobs:
       if: matrix.python-version == env.GH_COV_PY && matrix.os == env.GH_COV_OS && github.actor != env.GH_DEPENDABOT
       uses: codecov/codecov-action@v4
       with:
-        token: ${{ secrets.CODECOV_TOKEN }}
         flags: py-unittests
         name: py-opentimelineio-codecov
         fail_ci_if_error: true
+      env:
+        # based on: https://github.com/codecov/codecov-action?tab=readme-ov-file#usage
+        CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
 
   package_wheels:
     needs: py_build_test