Challenge-level bounded concurrency must preserve per-challenge agent ordering and isolate mutable git worktrees

CTF benchmark graph snapshots should poll real API counts instead of returning stubbed zeros