use CPM to handle catch2 and codecoverage deps

[ryan597]

CPM to handle dependencies

Before submitting

• Was this discussed via a GitHub issue? (not for typos and docs)
• Did you read the contributor guideline, Pull Request section?
• Did you make sure your PR does only one thing, instead of bundling different changes together?
• Did you write any new necessary tests? (not for typos and docs)
• Did you verify new and existing tests pass locally with your changes?
• Did you list all the breaking changes introduced by this pull request?

PR review

Reviewer checklist

• Is this pull request ready for review? (if not, please submit in draft mode)
• Check that all items from Before submitting are resolved
• Make sure the title is self-explanatory and the description concisely explains the PR
• Add labels and milestones (and optionally projects) to the PR so it can be classified

[github-actions]

Code Coverage Report

Coverage after merging cmake_cpm_deps into main will be

24.01%

Coverage Report for Changed Files

File	Stmts	Branches	Funcs	Lines	Uncovered Lines