But all code examples in guix repository use code like this

(patches (search-patches "somepackage-CVE-fix.patch"))

which uses patches from /gnu/packages/aux-files

What code should I write in package definition to download file, unzip it and apply patch?

Dmitry