PII-Bench: Evaluating Query-Aware Privacy Protection Systems