Fix Kerberos auth, target-file mounts, and DNS hangs in Docker run

[Sw3d1shPh1sh]

Summary

• manspider.sh: mount the invoking user's real home directory read-only so absolute target-file and ccache paths resolve inside the container, mount cwd at /work so relative target-list files resolve too, and pass through KRB5CCNAME/krb5.conf when present on the host. Still pulls the published blacklanternsecurity/manspider image by default; set MANSPIDER_LOCAL_BUILD=1 to instead build and run from a local checkout.
• manspider.py: validate Kerberos ccache availability up front with a clear error instead of failing silently deep in impacket, and add -K/--ccache to point at a specific ccache file directly (bypasses sudo stripping KRB5CCNAME, and overrides any existing KRB5CCNAME).
• smb.py/util.py: add run_with_timeout() and use it around SMBConnection() and kerberosLogin() — impacket's own timeout= kwarg only bounds the TCP connect/recv phase, not DNS resolution (socket.getaddrinfo()), so an unreachable/garbage target could hang for minutes with no indication anything was wrong. Also stop re-attempting Kerberos on the guest/null session fallback, and warn (rather than silently swallow) when a target-list file can't be opened.

Test plan

• Manual run against a real target list file and Kerberos ccache to confirm the original "exits without warning" / "file target list processes as file:445" bugs are fixed
• Confirm an unreachable/garbage target now times out with a clear message instead of hanging
• MANSPIDER_LOCAL_BUILD=1 ./manspider.sh --help still builds and runs correctly