An Empirical Game-Theoretic Analysis of Autonomous Cyber-Defence Agents