What is the "right" way to track a custom patch to a contributed module?
I keep all of those in the projects make file, which makes it easy to apply the patch again should the module be updated without it commited, and remove it when it's no longer necessary.

This answer makes the most sense in context of my answer to the question Should I source control contribed modules in my project?.