I’m looking for a way to determine what user applied a CU patch to SQL Server.

Perhaps that information is stored in the SQL Server itself, or in the registry/hive somewhere?