GRM-107: refactor: use devx Makefile aliases, bump devx>=0.23.0

Makefile

@@ -15,6 +15,8 @@ DEVX_PYTHON := $(BIN)/python
 DEVX_VENV := $(VENV)
 DEVX_BIN := $(BIN)
 DEVX_COV_PKG := src/gitea_runner_manager
+DEVX_TEST_PATHS := tests/ scripts/tests/
+DEVX_LINT_PATHS := src/ scripts/ tests/
 
 # Include shared targets from devx package (create-task, create-pr, push-with-pr,
 # check-config, workflow-lint, lint-ruff, clean, venv, .env, activate-scripts,
@@ -66,6 +68,9 @@ setup-release: $(VENV)/bin/activate .env configure-gitea-pypi
 # Usage: make setup-image              (runtime deps only, devx from image)
 #        make setup-image EXTRAS=lint  (runtime + lint deps, e.g. ansible-lint)
 #        make setup-image EXTRAS=ci,lint (runtime + ci + lint deps, upgrades devx)
+# NOTE: Cannot alias to devx-setup-image because the venv must exist before
+# devx.mak can be included (chicken-and-egg). This standalone target creates
+# the venv symlink first, then installs the project.
 setup-image:
 	@if [ -d /opt/venv ]; then ln -sf /opt/venv .venv; . .venv/bin/activate; \
 		if [ -n "$$CI_GITEA_TOKEN" ]; then export PIP_EXTRA_INDEX_URL="https://$$CI_GITEA_USERNAME:$$CI_GITEA_TOKEN@git.oblachno.oblachno.fyi/api/packages/oblachno-oss/pypi/simple/"; fi; \
@@ -139,7 +144,10 @@ install-tools: devx-install-tools
 install-hooks: devx-install-hooks
 clean: devx-clean
 test-unit: devx-test-unit
-pytest-cov: devx-pytest-cov
+
+# Override devx-pytest-cov to cover both src/ and scripts/
+pytest-cov:
+	@$(BIN)/pytest $(DEVX_TEST_PATHS) -v --cov=src/gitea_runner_manager --cov=scripts --cov-report=term-missing --cov-fail-under=100
 workflow-lint: devx-workflow-lint
 workflow-dryrun: devx-workflow-dryrun
 workflow-check: devx-workflow-check