Fix patch organisation in the spec file
* Move ECC patches back to upstreamable section
* Move system cacerts & crypto policy patches to upstreamable section
* Merge "Local fixes" and "RPM fixes" which amount to the same thing
* Move system libpng & lcms patches back to 8u upstreamable section