chore: CAP-1007 add ASM eval tooling

[GangGreenTemperTatum]

Summary

• Adds the attack-surface-management capability to the current capabilities repo layout
• Adds active BBOT FastMCP tools needed by CAP-1006 eval tasks: get_db_schema, explore_nodes, explore_relationships, get_screenshot
• Adds SHODAN_API_URL support for task-local mock Shodan services
• Adds ASM agent and skills with BBOT graph/schema guidance
• Adds deterministic unit tests for BBOT graph tooling and mock Shodan behavior

Validation

• uv run --project dreadnode/attack-surface-management --with pytest python -m pytest dreadnode/attack-surface-management/tests -q
• uv run --project dreadnode/attack-surface-management --with ruff ruff check dreadnode/attack-surface-management
• git diff --check -- dreadnode/attack-surface-management

Docker-backed integration was also run locally against neo4j:5-community plus a local Shodan-compatible mock service; details are posted on CAP-1007.

Notes

A previous branch, ads/cap-1006-asm-eval-enablement, was pushed from an older local prototype history and could not be used as a GitHub PR head against main. This PR branch was reconstructed from origin/main and contains the same tested ASM capability payload in a history-compatible branch.