Adds build/cover/cover-html targets writing to a gitignored build/, and removes the last raw go invocation from README.
Comment-only: executable content of script/lint, Dockerfile.lint and .dockerignore is byte-identical.