It appears that the only place to schedule patch policies are:
1. Configuration > Security (which does everything)
2. Individual workstations (which does just that PC)
Am I missing something? I would think it should be possible to have a group of workstations assigned to one schedule and another group to another schedule.