Currently `patch-package` is only run from the `native` workspace but it would make sense to run it at the end after all workspace members are correctly installed. (in particular the new `electron-update-server` requires patches to the `hazel` package)