fix: audit sweep — memory_mb, timeout guards, non-root user across 275 tasks

- Add explicit memory_mb to 219 task.toml files (4096 default, 8192 for TS/JS)
- Add timeout 600 guards to 16 test.sh verifiers that lacked them
- Add non-root user creation (adduser claude) to 42 baseline Dockerfiles
  for OpenHands and other non-root harness compatibility
- Regenerate script registry and index

All 275 canonical tasks now pass structural, MCP config, resource
allocation, and harness compatibility checks.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: sjarmak

benchmarks/csb_org_compliance/ccx-compliance-052/task.toml

@@ -12,6 +12,7 @@ category = "compliance-audit"
 language = "cpp"
 difficulty = "hard"
 time_limit_sec = 900
+memory_mb = 4096
 mcp_suite = "csb_org_compliance"
 use_case_id = 52
 repo_set_id = "envoy-service-mesh"

benchmarks/csb_org_compliance/ccx-compliance-053/task.toml

@@ -12,6 +12,7 @@ category = "compliance-audit"
 language = "java"
 difficulty = "hard"
 time_limit_sec = 900
+memory_mb = 4096
 mcp_suite = "csb_org_compliance"
 use_case_id = 53
 repo_set_id = "apache-kafka-ecosystem"

benchmarks/csb_org_compliance/ccx-compliance-124/task.toml

@@ -12,6 +12,7 @@ category = "compliance-audit"
 language = "cpp"
 difficulty = "hard"
 time_limit_sec = 900
+memory_mb = 4096
 mcp_suite = "csb_org_compliance"
 use_case_id = 124
 repo_set_id = "mozilla-firefox"

benchmarks/csb_org_compliance/ccx-compliance-182/task.toml

@@ -12,6 +12,7 @@ category = "compliance-audit"
 language = "go"
 difficulty = "hard"
 time_limit_sec = 900
+memory_mb = 4096
 mcp_suite = "csb_org_compliance"
 use_case_id = 182
 repo_set_id = "kubernetes-ecosystem"

benchmarks/csb_org_compliance/ccx-compliance-183/task.toml

@@ -12,6 +12,7 @@ category = "compliance-audit"
 language = "go"
 difficulty = "hard"
 time_limit_sec = 900
+memory_mb = 4096
 mcp_suite = "csb_org_compliance"
 use_case_id = 183
 repo_set_id = "kubernetes-ecosystem"

benchmarks/csb_org_compliance/ccx-compliance-184/task.toml

@@ -12,6 +12,7 @@ category = "compliance-audit"
 language = "go"
 difficulty = "hard"
 time_limit_sec = 900
+memory_mb = 4096
 mcp_suite = "csb_org_compliance"
 use_case_id = 184
 repo_set_id = "kubernetes-ecosystem"

benchmarks/csb_org_compliance/ccx-compliance-187/task.toml

@@ -12,6 +12,7 @@ category = "compliance-audit"
 language = "cpp"
 difficulty = "hard"
 time_limit_sec = 900
+memory_mb = 4096
 mcp_suite = "csb_org_compliance"
 use_case_id = 187
 repo_set_id = "envoy-service-mesh"

benchmarks/csb_org_compliance/ccx-compliance-189/task.toml

@@ -12,6 +12,7 @@ category = "compliance-audit"
 language = "go"
 difficulty = "hard"
 time_limit_sec = 900
+memory_mb = 4096
 mcp_suite = "csb_org_compliance"
 use_case_id = 189
 repo_set_id = "grafana-observability"

benchmarks/csb_org_compliance/ccx-compliance-190/task.toml

@@ -12,6 +12,7 @@ category = "compliance-audit"
 language = "go"
 difficulty = "hard"
 time_limit_sec = 900
+memory_mb = 4096
 mcp_suite = "csb_org_compliance"
 use_case_id = 190
 repo_set_id = "grafana-observability"

benchmarks/csb_org_compliance/ccx-compliance-191/task.toml

@@ -12,6 +12,7 @@ category = "compliance-audit"
 language = "java"
 difficulty = "hard"
 time_limit_sec = 900
+memory_mb = 4096
 mcp_suite = "csb_org_compliance"
 use_case_id = 191
 repo_set_id = "apache-kafka-ecosystem"