The targeted rebuild Dockerfile still pinned bincraft v4.2.1 (predates the
patches argument), so build-one.R's patches= call would error. Bump to v4.4.0
to match the .crow workflows.
Also COPY the patch registry into the image so patches='local/patches'
resolves at /work/local/patches instead of silently no-opping.