Default attacker LLM, backed by req_llm.
Picks the model from opts[:model], then config :tribunal, :red_team_attacker_model,
then a strong-model default. Attack quality scales with the attacker's
reasoning ability, so the default leans toward a frontier model rather than
a small/fast one.