feat: add remote hashcat cracking backend

[l50]

Key Changes:

• Added optional remote hashcat execution through an HTTP crackd service when HASHCAT_SERVICE_URL is configured
• Preserved local hashcat behavior as the default path when remote service configuration is absent
• Implemented authenticated job submission, polling, timeout handling, and potfile retrieval for remote cracking
• Limited remote mode to single-wordlist attacks so GPU and wordlist management remain owned by the service

Added:

• Remote hashcat backend - Added ares-tools/src/cracker/remote.rs to submit crack jobs, authenticate with HASHCAT_TOKEN, poll job status, collect logs, and return cracked potfile results through ToolOutput
• Remote service configuration support - Added environment-based activation using HASHCAT_SERVICE_URL and HASHCAT_TOKEN, with clear errors when the service URL is set without a token
• Remote wordlist handling - Added basename normalization for wordlist paths and a default remote wordlist of rockyou.txt to avoid sending local absolute paths to the service

Changed:

• Cracking execution flow - Updated crack_with_hashcat in ares-tools/src/cracker.rs to delegate to the remote backend before falling back to the existing local hashcat execution path
• Timeout behavior - Reused max_time_minutes for remote job polling and returns a timeout-style failure when the remote job exceeds the configured budget

[l50]

Moving to fork PR per workflow — see https://github.com/l50/ares