feat: add SMB share name anonymization to variant generator

[l50]

Key Changes:

• Added share name anonymization so variant labs no longer leak upstream GOAD lore (e.g. "thewall") through SMB share names and their filesystem paths
• Fixed a nondeterministic collision where an account whose password equals its username (hodor) could lose its credential pairing or overwrite the username with a generated password
• Changed the ACL probe script to discover share roots dynamically via Get-SmbShare instead of a hardcoded path list that variant randomization would silently bypass
• Preserved the sql_svc service account and its generic fields verbatim, since the name is hardcoded across the ares attack tooling

Added:

• Share mapping pipeline - Introduced mapShares and a Shares field on Mappings to rename SMB shares declared under a host's vulns_vars.shares, using word-boundary matching so both the JSON key and its path (C:\thewall) are rewritten together (generator.go)
• Share name generation - Added GenerateShareName and a shareWords list (all >= 5 characters to avoid corrupting generic words) to the NameGenerator (namegen.go)
• Password-equals-username handling - Reused the username's mapping when a password matches a username, making the transformation deterministic and preserving the intended weak credential in mapPasswords (generator.go)
• Test coverage - Added TestServiceAccountPreserved, TestPreservedUserNotInOriginalNames, TestLoreStringsRewritten, and TestPasswordEqualToUsernamePreservesPairing (with a 20-iteration determinism loop), plus a generateAndRead helper and expanded test fixtures for shares, lore descriptions, and the hodor account (generator_test.go)
• Documented constants - Introduced preservedUsernames and minShareNameLength with rationale explaining the ares contract tradeoff and why short share names are skipped (generator.go)

Changed:

• ACL probe share discovery - Rewrote share_permissive_acls.ps1 to enumerate share roots via Get-SmbShare (skipping administrative $ shares) and append C:\inetpub\wwwroot\upload explicitly, since variant labs randomize share names and a fixed path list would report a false clean result
• Single-name account handling - Reworked fixUserFirstnameSurname to rebuild descriptions for dotless accounts (e.g. hodor) from the generated name, since their free-text lore descriptions contain no mapped entity and were never touched by text replacement (generator.go)
• Expanded validation blocklist - Grouped and significantly extended originalNames with additional domains, hosts, houses, given names, groups, shares, and lore strings, while documenting that sql_svc is deliberately absent to avoid failing validation every run (generator.go)
• Replacement ordering - Wired Shares into buildOrderedReplacements with explicit word-boundary tagging (generator.go)

Removed:

• Inline preserved-user literal - Replaced the hardcoded map[string]bool{"sql_svc": true} in NewGenerator with the shared preservedUsernames variable (generator.go)
• Redundant test assertion - Removed the inline sql_svc preservation check from TestGeneratorEndToEnd, now covered by the dedicated TestServiceAccountPreserved (generator_test.go)