Coverity scan

resolves #3 

configuring it automatically via github didn't work since this repo isn't in my personal account, but it seems to run

though it shows "N/A lines of code", which isn't that helpful - I think/hope this is because it's still in the review period