feat: three patch-apply modes — hosted, vendored, agent — with full ecosystem + VEX coverage #345

Job	Run time
test (ubuntu-latest)	9m 42s
lint-ecosystems	7s
coverage	8m 55s
e2e-docker (deno)	4m 25s
setup-matrix (npm)	3m 59s
test (windows-latest)	21m 37s
coverage-docker (cargo)	5m 31s
test-release	27m 42s
e2e-docker (nuget)	4m 28s
dispatch-tests	9s
coverage-docker (golang)	5m 25s
test (macos-latest)	12m 15s
coverage-docker (nuget)	5m 45s
e2e-docker (npm)	4m 35s
clippy	23s
setup-matrix (cargo)	3m 21s
e2e-docker (cargo)	4m 25s
setup-matrix (nuget)	3m 42s
coverage-docker (maven)	6m 21s
e2e-docker (pypi)	4m 51s
coverage-docker (pypi)	5m 43s
coverage-docker (composer)	4m 44s
coverage-docker (npm)	5m 36s
setup-matrix (pypi)	4m 49s
setup-matrix (deno)	3m 14s
e2e-docker (golang)	4m 13s
coverage-docker (gem)	4m 20s
setup-matrix (golang)	3m 8s
e2e-docker (composer)	4m 24s
e2e-docker (maven)	4m 39s
setup-matrix (composer)	3m 8s
setup-matrix (maven)	4m 30s
coverage-docker (deno)	5m 29s
e2e-docker (gem)	4m 9s
setup-matrix (gem)	3m 21s
coverage-merge	25s
e2e (ubuntu-latest, e2e_golang)	1m 34s
e2e (ubuntu-latest, e2e_safety_pnpm)	1m 49s
e2e (ubuntu-latest, e2e_maven)	1m 37s
e2e (ubuntu-latest, e2e_nuget)	1m 37s
e2e (macos-latest, e2e_safety_pnpm)	2m 15s
e2e (ubuntu-latest, e2e_vendor_gem_build)	1m 42s
e2e (ubuntu-latest, e2e_safety_cargo_build)	1m 35s
e2e (windows-latest, e2e_safety_cargo_build)	1m 28s
e2e (ubuntu-latest, e2e_cargo)	1m 36s
e2e (ubuntu-latest, e2e_vendor_composer_build)	1m 39s
e2e (windows-latest, e2e_safety_pnpm)	2m 13s
e2e (ubuntu-latest, e2e_composer)	1m 36s
e2e (macos-latest, e2e_safety_cargo_build)	2m 4s
	3h 46m 15s

Provide feedback