[BUG] All Versions Pre-V6 Have Broken CLI Validation Making them Practically Unusable

[timothymathison]

Describe the bug

The GPG key that is used to validate the CLI was moved: codecov/codecov-cli#716
All older versions of the orb have a hard-coded reference to the old location and V6 was only just released yesterday.

To Reproduce
Use the codecov/upload command with any older version without disabling CLI validation.

Expected behavior

There should have been a reasonable warning before removing the old key and/or the updated key reference should have been backported to older orb versions first.

Product Area

Coverage.

Commit and CI link

V6 update: 5ab5e97

[raidancampbell]

This, in combination with #250 (skip_validation doesn't work correctly) proved problematic for us.

Our fix was to add a command block with

curl -O https://cli.codecov.io/latest/linux/codecov
chmod +x codecov

then configure the orb with:

binary: "<< pipeline.parameters.working-path >>/codecov"

Simply taking the upgrade wasn't an option for us for unrelated restrictions.

[drewpc]

@thomasrockhu-codecov can you look at these issues/PRs and add some of these fixes to a new release?