Add CVE-Bench benchmark adapter

[homanp]

What does this PR do?

Adds an official-compatible CVE-Bench benchmark path for PITHOS. The new pithos cvebench commands can run doctor, pull, smoke, and eval flows, build a Pi-enabled CVE-Bench Kali agent image, use a Pi-backed Inspect solver, and write normalized benchmark artifacts.

Fixes #

Checklist

• I tested my changes
• I reviewed my own code

Test plan

• uv run ruff check .
• uv run ruff format --check .
• uv run pytest
• uv run python -m compileall pithos tests
• uv build

[homanp]

@superagent review

[superagent-security]

Superagent found 2 security concern(s).