cache pip dependencies in CI; pin setuptool[_scm] dependencies to fix build; codecov action bump

cache pip dependencies in CI; pin setuptool[_scm] dependencies to fix build; codecov action bump #356