cargo-hfuzz ci: specify manifest patches via cargo --config (#14372)

This is less brittle than locally editing Cargo.toml, which breaks when
our devs submit PRs such as #13992 that also temporarily add a patch
section.