Coveralls apiUrl use badge subdomain

To bypass CloudFlare's threat control.