Require full successful dry run by default before patching

The gitlab-patcher has no way to continue or safely re-patch after a failure because re-applying the same patch twice is not a safe operation. We should require a dry-run that must report 100% successful before continuing with a patch.