tools: rework patch handling

Feed the (base) filename as yet another token and do read from stdin for
the child script.

Signed-off-by: Emil Velikov <emil.l.velikov@gmail.com>