Add never_skip_patches hook to stop migration on patch failure

Apps can list patches in `never_skip_patches` that should halt migrations on failure instead of being skipped.