Take Bazel's patches to source artifacts into account

[sschuberth]

Patches to source artifacts are not included in the Analyzer result and hence not downloaded or scanned.

[sschuberth]

Instead of adding patches to the ORT result, we should consider doing this similar to like planned for the BitBake integration: To upload patched source artifacts to a custom storage, like S3, from where the scanner would use them.