Write default patch queries explicitly to FMA manifests

[iansltx]

Related user story

#41815

Task

Instead of having blank patch policy query values on each FMA manifest and relying on the server defaulting when a zero value is found for that field, generate patch policy queries as part of FMA ingestion, such that every output manifest includes a non-empty patch query.

Reason for this is to give us better auditability on what queries we're generating, and if we need to make minor tweaks/overrides for a given query those show up as an appropriately minor diff when implemented rather than going from zero to extant.

Condition of satisfaction

All FMA manifests have populated patch queries, and defaulted queries are generated as part of the FMA ingestion GHA job.