Function patch_statediffs 

async fn patch_statediffs(services: &Services, scan: &Scan) -> Result

Patches the ghost halves of infected statediff entries to their winners.

Re-emitting through the sorted serialize path drops any entry the patch makes a duplicate. The digest row naming each patched state rides the same transaction: deleted, never recomputed, since a recomputed digest could collide with an existing key and manufacture a duplicate state this family has no detector for.