note unified patches

patch.yml

@@ -238,13 +238,13 @@ debrand:
     - libreport
     - lorax-templates-rhel
     - nginx
-    - openscap              # temporary, submitting upstream PR
-    - osbuild-composer      # can we upstream?
-    - pesign                # temporary for 9, may end up being replaced by sbsigntool
+    - openscap
+    - osbuild-composer      # unified patches, all should match (exception is maintenance mode)
+    - pesign                # temporary, will be replaced by sbsigntool
     - PackageKit
     - python-pip
     - redhat-rpm-config
-    - scap-security-guide   # upstream?
+    - scap-security-guide   # unified patches
     - shim
     - shim-unsigned-x64
     - shim-unsigned-aarch64