VPI-Bench: Visual Prompt Injection Attacks for Computer-Use Agents