sqlite3: apply patch for CVE-2025-29087/CVE-2025-29087

Equivalent to #413983 that went on 24.11.
Applying only the patch seemed the safe play given the build
system changes that went in #398702.

pkgs/development/libraries/sqlite/CVE-2025-3277_CVE-2025-29087.patch

@@ -0,0 +1,11 @@
+--- a/sqlite3.c
++++ b/sqlite3.c
+@@ -1570,7 +1570,7 @@ static void concatFuncCore(
+   for(i=0; i<argc; i++){
+     n += sqlite3_value_bytes(argv[i]);
+   }
+-  n += (argc-1)*nSep;
++  n += (argc-1)*(i64)nSep;
+   z = sqlite3_malloc64(n+1);
+   if( z==0 ){
+     sqlite3_result_error_nomem(context);

pkgs/development/libraries/sqlite/default.nix

@@ -50,6 +50,9 @@ stdenv.mkDerivation rec {
     # https://sqlite.org/src/info/d7c07581
     # TODO: Remove in 3.49.0
     ./3.48.0-fk-conflict-handling.patch
+
+    # https://sqlite.org/src/info/2025-02-16T10:57z
+    ./CVE-2025-3277_CVE-2025-29087.patch
   ];
 
   outputs = [