Multi-Agent Penetration Testing AI for the Web