Resolve the CRAN version to build for a patch entry
resolve_patch_version.RdReturns the latest CRAN version satisfying the entry's versions constraint,
or NA_character_ when CRAN's latest does not satisfy it or lookup fails.
The CRAN lookup is cached per session by cran_latest_version().