Comparing AI Agents to Cybersecurity Professionals in Real-World Penetration Testing