Some FMA manifests are missing `queries.patched` after ingestion

[Brajim20]

Fleet versions

• Discovered: 4.84.0-rc
• Reproduced: 4.84.0-rc

Web browser and operating system: N/A

---

💥 Actual behavior

Several FMA output manifests are missing queries.patched after #42559. These apps only have an exists query and never received a patched query — not before this PR and not after the ingestion run in d594bbe.

Affected manifests:

App	Platform	Has input file?
docker	darwin	❌ No input (orphaned output)
cisco-webex	windows	❌ No input (orphaned output)
keeper-password-manager	darwin	✅ homebrew
cursor	windows	✅ winget
adobe-acrobat-pro	darwin	✅ homebrew
evernote	darwin	✅ homebrew
backblaze	darwin	✅ homebrew
telegram	darwin	✅ homebrew
quip	darwin	✅ homebrew

🛠️ To fix

TBD during estimation

🧑‍💻 Steps to reproduce

These steps:

• Describe the workflow that led to the error, but have not yet been reproduced in multiple Fleet instances.

1. Navigate to ee/maintained-apps/outputs/ in the Fleet repo
2. Run from the repo root:

for f in $(find ee/maintained-apps/outputs -name "*.json"); do
  app=$(echo $f | awk -F'outputs/' '{print $2}')
  missing=$(jq '[.versions[].queries.patched] | map(select(. == null or . == "")) | length' "$f")
  if [ "$missing" -gt 0 ]; then
    echo "MISSING patched query: $app ($missing versions)"
  fi
done

3. Observe that the apps listed above are missing queries.patched in their output manifests

🕯️ More info

TODO

[jkatz01]

It seems like the darwin apps that get this bug have either no input file or have "frozen": true in the input file.
docker for darwin is orphaned and replaced by docker-desktop/darwin (docker/windows for windows).
Nothing obvious for cisco-webex (inputs/winget/webex.json) and cursor.

[georgekarrv]

To fix, make sure all entries have a default patched query regardless of frozen / missing etc