use istanbul for code coverage

* Requires no instrumentation
* add `make test-cov` to generate coverage reports