feat(lab1): juice shop deploy + PR template + triage report

[Mukhin-I]

Goal

Deploy OWASP Juice Shop v20.0.0 locally, document a triage report, and bootstrap the PR + CI workflow.

Changes

• submissions/lab1.md — triage report (deploy, health check, headers, top-3 risks → OWASP Top 10:2025)
• .github/PULL_REQUEST_TEMPLATE.md — reusable PR template
• .github/workflows/lab1-smoke.yml — CI smoke test that boots Juice Shop and checks health

Testing

• docker run … juice-shop:v20.0.0 → HTTP 200 on /, 46 products from /api/Products, version 20.0.0
• curl -I → CSP and HSTS absent; Access-Control-Allow-Origin: * observed
• CI: lab1-smoke (see Checks below)

Artifacts & Screenshots

• submissions/lab1.md
• CI run:

---

Checklist

• Title is clear (feat(labN): <topic> style)

• No secrets/large temp files committed

• Submission file at submissions/labN.md exists

• Task 1 — Juice Shop deployed, triage report in submissions/lab1.md

• Task 2 — .github/PULL_REQUEST_TEMPLATE.md created

• Task 3 — GitHub stars + follows complete

• Bonus — lab1-smoke.yml green on this PR