What kind of change does this PR introduce?

This adds a diff-cover step to GHA that enforces that every new or modified line of code is covered.

I find this is a good (although imperfect) way to progressively increase code coverage.
What do you think?

Checklist

• You ran the linters with pre-commit.

• You consent that the copyright of your pull request source code belongs to Authlib's author.