In general, Patches and patch bundles that update modules that may potentially disrupt the interoperability between primary and physical standby systems running different database home software are "not certified as Data Guard Standby-First Installable ."
Generally, OJVM PSU is neither RAC Rolling nor Standby First installable.
Check the MOS note -> MOS Note:1929745.1: Oracle Recommended Patches — OJVM PSU Patches
It means you can not install it to your standby first..
Basically you will first patch your primary and then standby.
Check the readme for shutting down the databases before patching (check if it says so)
So normally you should stop managed recovery, stop primary and standby.
apply OJVM in primary
apply OJVM in standby
start primary
apply post installation in Primary (sql related works)
start standby
start managed recovery on standby
check this blog post, it seems okay ->
http://allappsdba.blogspot.com/2017/10/how-to-apply-db-psu-and-ojvm-psu-in.html