Function applied_patches 

pub async fn applied_patches(
    manifest: &PatchManifest,
    package_paths: &HashMap<String, PathBuf>,
) -> VerifyOutcome

Walk the manifest and bucket each PURL into applied / failed.

package_paths is the CLI-supplied purl -> on-disk package dir map (from find_packages_for_purls). A PURL absent from the map is recorded as package_not_found and ends up in failed.