build: refine coverage thresholds