feat(lab1): juice shop deploy + PR template + triage report

[dilfd2006]

Goal

Deploy OWASP Juice Shop v20.0.0 locally, write a triage report, and set up the PR template and CI smoke test for the course workflow.

Changes

• submissions/lab1.md — triage report with asset info, deployment details, surface analysis, headers, and top 3 risks
• .github/PULL_REQUEST_TEMPLATE.md — PR template with Goal, Changes, Testing, Artifacts & Screenshots sections
• .github/workflows/lab1-smoke.yml — GitHub Actions smoke test that polls Juice Shop on every PR

Testing

docker run -d --name juice-shop -p 127.0.0.1:3000:3000 bkimminich/juice-shop:v20.0.0
curl -s -o /dev/null -w "HTTP %{http_code}\n" http://127.0.0.1:3000
curl -s http://127.0.0.1:3000/rest/admin/application-version
curl -s http://127.0.0.1:3000/api/Products | jq '.data | length'

Observed output:

HTTP 200
{"version":"20.0.0"}
46

Artifacts & Screenshots

• submissions/lab1.md — full triage report
• .github/PULL_REQUEST_TEMPLATE.md — PR template file
• .github/workflows/lab1-smoke.yml — CI smoke test workflow

---

Checklist

• Title follows feat(labN): <topic>
• No secrets or large temp files committed
• submissions/labN.md exists