Move Coverity scan to Makefile; simplify jenkins-build.sh