Move Coverity scan to Makefile; simplify jenkins-build.sh

Also switches to a version of gcovr that correctly counts branches that were never executed against us. See https://github.com/gcovr/gcovr/pull/28