feat: add attack surface management capability

[GangGreenTemperTatum]

Summary

• Adds the attack-surface-management capability with BBOT, Neo4j graph analysis, Shodan enrichment, screenshot triage guidance, and a worker-coordinated ASM pipeline.
• Includes MCP servers, tool wrappers, worker agents, skills, and focused tests.

Validation

• dreadnode capability validate capabilities/attack-surface-management
• uv run --extra dev pytest -q tests from capabilities/attack-surface-management
• pre-commit run --files $(git diff --cached --name-only) before commit
• just validate reports 0 failures; existing environment/tooling warnings remain for unrelated capabilities.