Bump go version to 1.16 and drop the codecov token, which is now documented as not required for public repositories.