build: bump coverage thresholds