feat: add support for ESC11 (RPC ICPR) relay mode in ADCS exploitation chain

**Added:**

- Introduced `RelayMode` enum to distinguish between ESC8 (HTTP web enrollment) and ESC11 (RPC ICPR) relay modes in the orchestrator
- Added `relay_target_url` argument to the relay-coerce toolchain, allowing override of ntlmrelayx relay target for ESC11 and arbitrary targets
- Implemented validation and parsing logic for the `relay_target_url` argument in `ares-tools`, including scheme checks and shell metacharacter filtering
- Added unit tests for new relay target behaviors, including acceptance/rejection of specific schemes and forbidden characters

**Changed:**

- Refactored ADCS exploitation flow to route both ESC8 and ESC11 through the unified `dispatch_relay_coerce_chain` function, removing duplication and improving code clarity
- Updated logging, deduplication, and error-handling paths to support both relay modes, including improved log context with `esc_type`
- Modified argument construction and task dispatch to conditionally include `relay_target_url` for ESC11 chains
- Enhanced test coverage for the new relay mode and argument handling

**Removed:**

- Deprecated the old `dispatch_esc8_deterministic` function in favor of the unified relay-coerce chain implementation

Author: l50