VulnHubManager: asyncpg pool + host_debug upsert (multi-target,
unlike rapid7 which replaces)
Endpoints: GET catalog, GET targets, POST deploy/{vm_id},
DELETE {vm_id} — clone XenServer template → start → poll IP →
register in host_debug for bm12/uzi DEBUG_MODE scanning
M provisioning/orchestrator/app/main.py
M provisioning/orchestrator/app/models/schemas.py
A provisioning/orchestrator/app/services/vulnhub_manager.py
A scripts/import_vulnhub_ova.sh