fix(benchmarks): bound raw submission read and refresh Dockerfile checksum

- Bound _raw_submission() with is_regular_bounded_file to prevent
  reading oversized submission files before strict validation
- Refresh Dockerfile checksum label to match updated verifier code

Author: morluto

benchmarks/datasets/conjecture-probes-v1/perfect-cuboid-scope-audit/tests/Dockerfile

@@ -1,6 +1,6 @@
 FROM python:3.12-slim@sha256:57cd7c3a7a273101a6485ba99423ee568157882804b1124b4dd04266317710de
 LABEL jacobian.task="jacobian/perfect-cuboid-scope-audit" \
-      jacobian.checksum="76663826594ca3763322609df24095c3e82fa26b68134fa43ecda04ad9c1a7b0"
+      jacobian.checksum="746547d8c69379618f8a80892d2fc7c9cfa099548a97120f67c28c2b9f6a1991"
 RUN python -m pip install --no-cache-dir attrs==26.1.0 jsonschema==4.26.0 jsonschema-specifications==2025.9.1 referencing==0.37.0 rpds-py==2026.6.3 typing-extensions==4.16.0
 COPY input.json public_contract.json test.sh verifier.py verifier_support.py /tests/
 COPY input.json /app/input.json

benchmarks/datasets/conjecture-probes-v1/perfect-cuboid-scope-audit/tests/verifier.py

@@ -9,6 +9,8 @@
 from typing import Any
 
 from verifier_support import (
+    MAX_SUBMISSION_BYTES,
+    is_regular_bounded_file,
     evidence_list_is_bound,
     load_submission,
     read_evidence_json,
@@ -26,6 +28,8 @@
 
 def _raw_submission() -> dict[str, Any] | None:
     """Parse the raw submission JSON without strict schema validation."""
+    if not is_regular_bounded_file(Path("/app/submission.json"), max_bytes=MAX_SUBMISSION_BYTES):
+        return None
     try:
         value = json.loads(Path("/app/submission.json").read_text())
     except (OSError, ValueError, RecursionError, MemoryError):