VulnGym Uses AI-Trained APT Attackers to Stress-Test Enterprise Patching Strategies